STUDIES AND ANALYSES 

OF THE 

SPACE SHUTTLE MAIN ENGINE 

Contract No. NASw-3737 


Technical Report 
Covering 

SSME FAILURE DATA REVIEW, 
DIAGNOSTIC SURVEY AND 
SSME DIAGNOSTIC EVALUATION 


BCD-SSME-TR-86-1 
December 15, 1986 


R. C. Glover, B. A. Kelley and A. E. Tischer 


Prepared For 


National Aeronautics and Space Administration 
George C. Marshall Space Flight Center 
Marshall Space Flight Center, AL 35812 


oo 




CN 


U) 

to 

\ 


1 

H cr» 


U ™ 

00 

4 o 

525 

03 cf 


o 

rsi 

C3 


05 

D 
-I 
H W 
co ac 
W Pm w Jh 

to 


o 


33 

rsj 

O 

cn 

cj 


S U o 

< CD 5Z> o 
25 UJ -STS 

<C (P 

*• >* r-i 

25 23 >> (p 

< H -M 
C3 3 4J 

on S3 CO n 

M ^ 

Q 35 H 
^ H h 2 

h co o ol 

to aa o H 

H uy 

^ C5 

<M 


00 M M ^ 
a> u) 

-sT\ » > ^ 

00 33 * pq • 

r> t/3 3c o 

r««* i 


W3 U > H U 

0 < uq go 

1 Q< « Q % 

25 • 

cn < a w 

o H <c ,q 

5S J3 fsaj H v 

Q Q H 


BATTELLE 

Columbus Division 
505 King Avenue 
Columbus, Ohio 43201-2693 


STUDIES AND ANALYSES 

OF THE 

SPACE SHUTTLE MAIN ENGINE 

Contract No. NASw-3737 

Technical Report 
Covering 

SSME FAILURE DATA REVIEW, 
DIAGNOSTIC SURVEY AND 
SSME DIAGNOSTIC EVALUATION 

BCD-SSME-TR-86-1 


December 15, 1986 

R. C. Glover, B. A. Kelley and A. E. Tischer 


Prepared For 


National Aeronautics and Space Administration 
George C. Marshall Space Flight Center 
Marshall Space Flight Center, AL 35812 


A. E. Tischer 
Manager 
SSME Study 



N. H. Fischer 
Manager 

Space Systems Section 


BATTELLE 

Columbus Division 
505 King Avenue 
Columbus, Ohio 43201-2693 


ABSTRACT 


The results of a review of the SSME failure data for the period 1980 through 
1983 are presented. The data was collected, evaluated and ranked according to 
procedures established during the study. A number of conclusions and 
recommendations are made based upon this failure data review. The results of 
a state-of-the-art diagnostic survey also are presented. This survey covered 
a broad range of diagnostic sensors and techniques and the findings have been 
evaluated for application to the SSME. Finally, a discussion of the initial 
activities for the on-going SSME diagnostic evaluation is included. 
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STUDIES AND ANALYSES OF THE SPACE SHUTTLE MAIN ENGINE 
Contract Number NASw-3737 


Technical Report 
Covering 

SSME Failure Review, Diagnostics Survey, and SSME Diagnostic Evaluation 


SUMMARY 


Introduction 


The National Aeronautics and Space Administration (NASA) recently 
has shown increased interest in condition monitoring and failure diagnostics 
for the Space Shuttle program. This interest has been prompted primarily by 
the need to reuse various Space Shuttle elements. NASA is emphasizing the 
Space Shuttle Main Engine (SSME) as a key candidate for condition monitoring 
and diagnostics. 

This study was initiated by NASA to (1) review the SSME failure data 
base and identify major failure types, (2) survey a broad spectrum of diag- 
nostics and identify promising candidates for use on the SSME, (3) conduct a 
systems-level analysis of the SSME diagnostic system using the outputs of 
Items 1 and 2 and (4) make recommendations concerning improvements in the SSME 
diagnostic system. 

This technical report covers the following tasks of this study: 

• SSME Failure Data Review 

• Diagnostics Survey 

• SSME Diagnostic Evaluation (on-going). 

SSME Failure Data Review 

The first task of the SSME study was to develop an understanding of 
the engine operating characteristics and failure modes. The task included 
collection and reduction of data on SSME failure modes, categorization of the 
failure modes, ranking of the failure modes, Identification and evaluation of 
measurable parameters for each failure mode and identification of parameters 
for possible trending information. 
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The initial activity on this task was a review of the available SSME 
failure data. The information used in this study included all of the 3-line 
UCRs written from January 1980 through November 1983, selected full-page UCRs, 
the Rocketdyne Failure Modes and Effects Analysis (FMEA) Report and the SSME 
Accident/Incident Reports for 1980 through 1983. 

Approximately 3000 abbreviated UCRs were reviewed in this task. 
This number was reduced to about 2900 by an initial screening process. The 
next step in the data reduction was to chart the failure modes over time to 
see the effects of the recurrence control procedures, to combine like failure 
modes and to eliminate minor problems which did not reappear in the data. The 
final step in the UCR data reduction was to collect the significant full-page 
UCRs and to review the detailed information. At the conclusion of these three 
screening processes, 1440 of the original UCRs were remaining. These UCRs 
represented approximately 190 engine failure modes. The reduced UCRs were 
plotted versus failure type. The UCRs were also plotted as a function of the 
individual SSME components. 

The eight SSME Accident/Incident Reports written between January 
1980 and December 1983 were reviewed along with the FMEA Report. The review 
of the FMEA Report led to the development of fault tree diagrams for each of 
the major components to augment available data on the failure modes and their 
propagations. The test firing cutoff UCRs were also reviewed to determine the 
diagnostic role of the current SSME sensors. A procedure was developed for 
ranking the failure modes identified by the data collection and screening. 
The failure modes were ranked from 1 to 10, with 1 being the most critical. 

The measurements necessary to detect each failure mode were identi- 
fied and evaluated. The several hundred failure modes for the entire engine 
can be reduced to about fifteen types of failures. The possible measurable 
parameters for each failure mode are evaluated along with possible in-flight 
and between-f light sensors or diagnostic techniques. 

The conclusions drawn from the SSME failure data review include: 

• Turbopumps have the highest priority, but other components have 
failure modes which must be considered 

• Major accidents have had random failure modes and the commonly 
recurring failure types generally have not been to blame 

• Many failure modes presently are detected too late to implement 
engine shutdown without sustaining further damage 
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• UCR data from test firings indicate that the present sensors can 
be useful in reliably diagnosing many failure modes 

• Several recently developed and novel sensors could be useful for 
detection of critical failure inodes, especially In the high- 
pressure turbopumps 

• Many fatigue or wear-related failures can be trended by informa- 
tion from conventional sensors. 

The recommendations resulting from the SSME failure data review 

include: 

• The design and development of an Integrated diagnostic system 

should be pursued (including in-flight and ground-based elements) 

• SSME failure diagnosis could be improved by analysis of the data 
being collected by the current conventional sensors coupled with 
signal processing and enhancement 

• Promising sensing techniques which target major engine failure 

modes should undergo further development and testing. 

Diagnostic Survey 

A survey of the state of the art of machine diagnostics was 

performed as the second task in the SSME study. The primary goal was to iden- 

tify new diagnostic sensors, processing techniques, and/or diagnostic 
approaches which might be applicable to the SSME. A secondary goal of this 
task was to identify the overall status of machine diagnostics and the rela- 
tive position of the SSME diagnostic system within this framework. 

The diagnostic survey section of this report begins with a number of 
definitions and other general information regarding the nature of machine 
diagnostics. This terminology and discussion is necessary to provide a 
foundation for organizing the survey data. 

A high-level overview of the SSME diagnostic and maintenance system was 
also prepared to identify the major elements of the current diagnostic 
approach and the interactions between them. This information was used as the 
basis for evaluating items identified during the diagnostic survey. 

The survey covered the three rather broadly defined applications 
areas of (1) diagnostics for liquid-fueled rocket engines, (2) diagnostics for 
aircraft engines, and (3) diagnostics for relevant non-aerospace Industries. 
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The survey involved interviews with experts in NASA, USAF, and a broad range 
of industries. In addition, relevant Battelle experts were interviewed and a 
thorough literature search was performed. 

The review of liquid rocket engines found that the SSME represented 
the state of the art in nearly all respects. This is not a startling conclu- 
sion in view of the fact that the SSME is the only major engine development 

program funded over the last 15-20 years. The SSME diagnostic system is also 
more sophisticated than its predecessors due to the engine's design 

attributes. 

Aircraft engines and their associated diagnostic systems have 
received far more attention than the liquid rocket engines. This can be 
attributed to a number of factors including the military emphasis on weapon 
availability, the civilian air carriers' desire to reduce costs, and the FAA's 
mandate to assure safety and reliability. This particular portion of the 
survey was especially informative. 

The non-aerospace industry has been somewhat slow in recognizing the 
potential of machine diagnostics. This position is probably influenced some- 
what by the higher safety factors which can be utilized in non-aerospace 

machinery. This situation is changing rapidly for a number of reasons. A 

number of potentially relevant techniques such as expert systems and pattern 
recognition ultimately may be proven first in this arena. 

The survey findings can be summarized as follows: 

• Diagnostics on liquid-fueled rocket engines other than the SSME 
were found to contain no novel techniques 

• Diagnostics on jet aircraft engines currently use a number of 
novel techniques that are not employed on the SSME 

• Diagnostics in non-aerospace industries employ the entire 
spectrum of sensors and diagnostic techniques. 

As a result of the survey findings, the following recommendations 

were made: 

• The use of new types of sensors and an increase in coverage pro- 
vided by on-board sensors 

• The use of image processing techniques to assist in ground-based 
inspections 

§ The use of pattern recognition to improve on-board diagnostics 
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• The application of non-linear filters for ground-based analysis 

• The establishment of an integrated data base system to include 
all engine performance/historical data. 

SSME Diagnostic Evaluation 

The third task of the SSME study is intended to assimilate the out- 
puts of the SSME failure data review and the diagnostics survey and to use 
this information for evaluating the current SSME diagnostic system. The prin- 
cipal objective of this task is to identify potential means for improving the 
availability of high-quality, pertinent engine data. This information will be 
used both in-flight and on the ground to assess the condition of the SSME and 
its respective components. 

To accomplish the objective outlined In the preceding paragraph, an 
analysis approach was formulated to address the key SSME diagnostic issues. 
These issues centered on maximizing the information yield from the current 
engine sensors. A secondary emphasis was placed on the efficient augmentation 
of this system in cases where major failure modes were not adequately covered 
by existing sensors. 

The Failure Information Propagation Model (FIPM) was selected as the 
analysis tool for use in this task. The FIPM is a technique developed by the 
Battel le Columbus Division to qualitatively evaluate the potential test points 
in a system. The objective of this qualitative evaluation is to assess the 
information bearing value of each test point. The model assumes that the 
system being depicted is in a near-normal state of operation. 

The high-pressure oxidizer turbopump (HPOTP) was selected as the 
initial SSME component for evaluation using the FIPM. An HPOTP FIPM was 
graphically constructed using the steps outlined in the SSME diagnostic evalu- 
ation section of this report. Subsequent to the development of the HPOTP 
FIPM, a preliminary analysis of the HPOTP failure information was performed 
using a failure information matrix. This matrix was used to develop a pre- 
liminary set of test signature equations for the HPOTP. 

Subsequent efforts to specify a set of diagnostic sensors which 
would target all of the high-priority HPOTP failure modes encountered diffi- 
culty due to the need for additional data. A decision was reached to restruc- 
ture the HPOTP FIPM to include the additional data needed, to adopt a more 
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formal development methodology, and to implement the new procedure in a data 
base format. 

The revised FIPM methodology has been completed and documentation 
will be provided in a subsequent technical report. The software associated 
with the FIPM data base is currently under development. The revised HPOTP 
FIPM presently is being formulated in parallel with the development of the 
FIPM data base software. 


On-Going Research 

A number of activities are currently in progress or planned in 
connection with this study. The tasks include: 

• Development of FIPM data base software 

• Generation and loading of FIPM data for the HPOTP 

• Generation and loading of FIPM data for the following SSME 
components: 

- high-pressure fuel turbopump (HPFTP) 

- low-pressure oxidizer turbopump (LPOTP) 

- low-pressure fuel turbopump (LPFTP) 

- oxidizer preburner (OPB) 

- fuel preburner (FPB) 

- main combustion chamber (MCC) 

- heat exchanger (HE) 

- main injector 

- nozzle 

• Assessment of candidate diagnostics 

• Analysis of existing engine data 

• Examination of on-board implications of SSME diagnostics 

• Recommendations for diagnostic system development. 
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INTRODUCTION 


The National Aeronautics and Space Administration (NASA) recently 
has shown increased interest in condition monitoring and failure diagnostics 
for the Space Shuttle program. This interest has been prompted primarily by 
the need to reuse various Space Shuttle elements such as the Orbiter, Space 
Shuttle Main Engines (SSMEs) and Solid Rocket Boosters (SRBs). The reuse of 
these major hardware items has created additional requirements for acquisition 
of valid wear and failure data on key Space Shuttle subsystems and components. 
This information is needed to verify the proper functioning of the Space 
Shuttle during its mission as well as to evaluate the maintenance required 
between flights. The principal NASA goals for improved monitoring and 
diagnostic systems are increased Space Shuttle reliability and safety coupled 
with reduced maintenance and turnaround costs. 

NASA is exploring the entire spectrum of monitoring and diagnostic 
techniques for potential application to the Space Shuttle program. Research 
is being conducted in the areas of instrumentation, data acquisition, data 
analysis, automated decision making, and automated record keeping. Several 
NASA field centers and a number of contractors are currently involved in these 
evaluations. Since diagnostics, as a science, is still in the early stages of 
development, much of this work is very fundamental and exploratory in nature. 
However, with recent technological gains in the field of electronics, specifi- 
cally microprocessors and computers, the capability of performing comprehen- 
sive diagnostics and condition monitoring tasks is now limited primarily by 
the availability and reliability of the appropriate transducers, and by the 
ability to understand and interpret the data being collected. 

NASA is emphasizing the SSME as a key candidate for condition moni- 
toring and diagnostics. The need for additional SSME data is the direct 
result of the engine's vital role during Space Shuttle launch and ascent. The 
ability to monitor, diagnose, and control degradations or failures of an 
operating engine is very important to both crew safety and mission success. 
It Is also desirable to obtain an accurate assessment of the engine's overall 
condition after completion of the firing cycle. Decisions concerning an 
engine's suitability for a subsequent mission and the extent of any post- 
flight maintenance or repairs require detailed data on major engine com- 
ponents. Information on engine condition both during and after firing is 
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equally important for ground test operations. However, the goal of accurately 
monitoring and diagnosing conditions in the SSME is complicated by a number of 
factors including the general engine design which maximizes performance while 
minimizing size and weight, the severe thermal and acoustic environments dur- 
ing engine operation, the reactivity and other properties of the liquid oxygen 
and liquid hydrogen propellants, and the extremely small time constants asso- 
ciated with major degradations and failures. 

This study was initiated by NASA to (1) review the SSME failure data 
base and identify major failure types requiring diagnostic monitoring, 
(2) survey a broad spectrum of diagnostic sensors and processing techniques 
and identify promising candidates for application to the SSME, (3) conduct a 
systems-level analysis of the current SSME diagnostic system using the outputs 
from Items 1 and 2, and (4) make recommendations concerning improvements in 
the SSME diagnostic system and approach. 

The task reports presented here cover three efforts to provide NASA 
with information to determine the major SSME failures, means to detect indi- 
cations of failures in time to take appropriate actions, and ways to evaluate 
the need for and usefulness of those means. 

The task reports accordingly cover and are entitled: 

• SSME Failure Data Review 

• Diagnostics Survey 

• SSME Diagnostic Evaluation. 

The SSME failure data review has been completed from the standpoint 
that the data from January 1980 to November 1983 has been collected and 
analyzed for use in the diagnostic evaluation and other areas. The diag- 
nostics survey has similarly been completed, with the information being 
incorporated in the diagnostic evaluation as well as providing a background 
for other work. The SSME diagnostic evaluation is being performed using 
Battel le's Failure Information Propagation Model which is described in the 
third section of this report. The FIPM process will rely heavily on the data 
collected and assessed in the first two tasks. Detailed results from the FIPM 
are only now being realized, and these are to be presented in a separate 
report. 


9 


SSME FAILURE DATA REVIEW 


The first task of the SSME study was to develop an understanding of 
the engine operating characteristics and failure modes. The task included 
collection and reduction of data on SSME failure modes, categorization of the 
failure modes, ranking of the failure modes, identification and evaluation of 
measurable parameters for each failure mode, and identification of parameters 
for possible trending information. This information is necessary to evaluate 
the effectiveness of diagnostic monitoring systems. 

Failure Modes Analysis 


Data Collection 


Most of the data necessary for the failure modes analysis was sup- 
plied by the Rocketdyne Division, Rockwell International Corporation, Canoga 
Park, CA. The main source of information was the Unsatisfactory Condition 
Reports (UCRs). Since there were many UCRs written and Rocketdyne' s previous 
study had included UCR information through 1979, it was decided in the present 
study to review all UCRs in a three-line format from January 1980 through 
November 1983. After the preliminary data reduction had taken place, selected 
full-page UCRs were collected for review. Other supplemental information 
received from Rocketdyne included the Failure Modes and Effects Analysis 
(FMEA) Report and Accident/Incident Reports for 1980 through 1983. 

To provide Battelle personnel with additional information, engine 
data from a recent test firing and a Shuttle flight were obtained from NASA 
Marshall Space Flight Center (MSFC) along with general Information on the SSME 
program. A diagnostics overview presentation was given by NASA Lewis Research 
Center (LeRC) personnel along with other general information needed to educate 
the Battelle researchers about various aspects of the SSME program. Informa- 
tion was also obtained from Rocketdyne personnel at NASA Kennedy Space Center 
(KSC) with regard to maintenance procedure and history. 
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UCR Review 


To identify the SSME failure modes and their relative importance, 
all three-line UCRs written from January 1980 through November 1983 were 
reviewed and categorized. Approximately 3000 UCRs were used in the review 
process. Each UCR had a criticality factor associated with it which ranged 
from one to three, one being the most dangerous. The only UCRs that were 
eliminated on the basis of their low criticality factor were those that had 
criticality N, or no criticality factor. These were very minor problems for 
which a UCR should not necessarily have been written. Some UCRs of criti- 
cality three were eliminated because the problem described could not possibly 
cause any failures. Examples of this type include UCRs written on normal dis- 
colorations of the main combustion chamber or small contaminants on the nozzle 
that could not affect engine performance. Approximately 2900 UCRs were 
included in the first-cut review. 

Appendix A contains the listing of the UCRs and their criticalities 
by component and a sample of the listing is shown in Figure 1. The high- 
pressure fuel turbopump had the most UCRs followed by the high-pressure 
oxidizer turbopump and the nozzle, respectively. The high-pressure oxidizer 
turbopump had the most criticality one UCRs, followed by the main injector, 
heat exchanger, and high-pressure fuel turbopump, in that order. 


Total 

No. Of CRITICALITY 


Component 

Description 

UCR ' S 

i 


T" 

N* 

A100 

Hot Gas Manifold 

80 

2 


77 

1 

A150 

Heat Exchanger 

18 

4 


12 

2 

A200 

Main Injector 

175 

5 

3 

162 

5 

A330 

Main Combustion Chamber 

105 

1 

3 

96 

3 

A340 

Nozzle 

296 


2 

285 

9 

A600 

Fuel Preburner 

171 


2 

165 

4 

A700 

Oxidizer Preburner 

13 
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B200 

High Pressure Fuel Turbopump 

457 

3 

11 

429 

14 

B400 

Hign Pressure 0xidl2er Turbopump 

331 

7 

11 

302 

11 


FIGURE 1. SAMPLE OF FIRST UCR REVIEW LISTING BY COMPONENT 
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Appendix B contains a breakdown of the failure modes, cause, and 
recurrence control for each component. A sample of these tables is given in 
Figure 2. There were literally hundreds of failure modes identified, many 
having several causes. A large percentage of the problems were assembly or 
manufacturing problems. Most listed design, assembly, or manufacturing 
changes to correct the problems. 

The next step in data reduction was to chart the failure modes over 
time to see whether the recurrence control procedures had remedied the prob- 
lems. Also, the failure mode listings were revised to combine like failure 
modes and to eliminate those that were minor, had occurred only once or twice, 
and where the corrective action showed that there were no recurrences. Appen- 
dix C contains the results of this review and a sample is shown in Figure 3. 
After this step, the number of UCRs remaining was approximately 1900 from the 
original 3000 reviewed including 260 failure modes. 


Fail. Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. T 2 3 N 


1 leak 

(a) Pin Plug Leak--Inadequate Seal— Add 

Leak Test 1 

(b) Wireway Leak— Epoxy Did Not Adhere— 

Process Change 3 

(c) Internal Leak— Tolerance Stackup — 

Detectable in Test 2 

(d) Hyd Oil Leak— Excessive Proof Test 

Cycl ing— None 2 

(e) Static Seal Leak— Burr Induced Scratch- 

New Inspection 1 

(f) Vent Port Leak— Defective 0-Ring— Open 2 

(g) Wireway Leak-- Inadequate Epoxy Coverage- 

Spec. Change 2 

2 Hydraulic Lockup Orift— Mfg. Error— Detectable— 

None 5 


1 

3 

2 

2 

1 

2 

2 

5 


3 Slew Rate Error— Contamination— None 2 


2 


FIGURE 2. SAMPLES OF FIRST UCR REVIEW FAILURE MODE TABLES 
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Comp. 

Time Period (Months) 



J-600 


1981 

155? 

1553 

Criticality 

Description - Cause 

Failure 

iBifii 


mil 

mm 

1 2 3 

Resolution 

1 




2 

- ~ 2 

Low Insulation resistance-damage 
$ fabri cat Ion- none 

3 



i 


~ • ~ 1 

Broken wire-suspect thermal 
Induced-thermal test revised 

4a 

1 2 


i 


~ — 4 

Output fal lure -unknown- none 

4c 


1 



~ - 1 

Erratic output -suspect sensor nut 
var 1 at 1 ons-e va 1 uat 1 on 

5 

2 




2 ~ 

Open circuit, encapsulement 
cracks-assembly-assy. change 


FIGURE 3. SAMPLE OF SECOND-CUT UCR TABLES 


The final step in the UCR data reduction was to collect the signifi- 
cant full-page UCRs and review the detailed information. At least one full- 
page UCR was requested from Rocketdyne for each failure mode identified. As a 
result of this step, several more failure modes were eliminated because they 
were minor problems of an aesthetic nature or were items which quality control 
and/or engine pretesting would eliminate. Some failure mode descriptions were 
modified using the more detailed information in the full-page UCRs. The full- 
page UCRs also provided more information as to the severity of the failure 
mode for use in the ranking of the failure modes. At the conclusion of the 
full-page UCR review, some failure modes were found to be similar enough to be 
grouped together. With some of the failure modes being eliminated, there were 
1440 of the original 3000 UCRs and approximately 190 failure modes. 
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Many of the failure modes in the UCR review were of an infrequent 
nature and were the result of assembly, procedure, or repair mistakes. Only a 
few of the failures were recurrent in nature and posed an Important safety 
risk. (Among these were turbopump bearing wear, turbine blade cracking, 
nozzle leaks, injector erosion, and sensor system failures.) 

The failure modes were then placed Into fifteen categories and tabu- 
lated for each component. This categorization resulted in a matrix which 
forms Appendix D. Figure 4 gives one dimension of the matrix, the number of 
UCRs versus failure type after the completed screening process. Cracking, 
usually caused by vibration or thermally induced fatigue, was shown to be the 
dominant failure type followed by various leakage problems. Most of the leak- 
age UCRs were written on the nozzle coolant tubes which are mainly a time con- 
suming maintenance item. The electrical problems mostly related to the 
sensors and their associated wiring. Contamination was a significant problem 
and was found on many of the components; it was usually caused by assembly 
errors and some contamination could precipitate many other failures depending 
upon the type of contaminant and location involved. Erosion was mainly a 
problem in the high temperature areas such as the injectors, turbines, and 
igniters. Wear was typically a problem for the high-pressure oxidizer turbo- 
pump bearings and this has been a continuing problem on the SSME. Torque, 
vibration, and excess travel problems are measurements made on the turbopumps 
to check for problems before they lead to catastrophic failure. The rest of 
the categories are not indicative of any particular component of the SSME. 

Figure 5 shows the number of UCRs versus Individual SSME components. 
The dominance of the two high-pressure turbopumps along with the disparity 
between the preburners are the most striking features in the graph. A 
detailed listing of the failure types and causes for each component Is located 
In Appendix E. 

A brief description of the failure modes and general problems 
for most of the major components follows; 

High-Pressure Fuel Turbopump (HPFTP) - The turbine area of the HPFTP 
is subjected to higher temperature and pressure than the other 
turbopumps in the SSME and consequently has more problems. Erosion 
and fatigue cracking were the subject of many UCRs for the turbine 
blades, turbine sheetmetal, and preburner to turbine joint area. 


NUMBER OF OCRs 



FAILURE TYPE 


FIGURE 4. NUMBER OF UCRS BY FAILURE TYPE 



COWONENTS 


FIGURE 5. NUMBER OF UCRS BY COMPONENT 


GIMBAL 
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The pump inlet and diffuser had a few failures along with some minor 
bearing problems. Seal leakage and rubbing has been more of a prob- 
lem than in the high-pressure oxidizer turbopump. Vibration due to 
cavitation and possible near resonance vibration conditions have 
been the subject of several UCRs. 

High-Pressure Oxidizer Turbopump (HPOTP) - Bearing problems have 
been a major source of UCRs for the HPOTP including severe vibration 
levels during testing as well as bearing ball and race wear. Bear- 
ing cage delamination has also occurred several times. Turbine 
blade cracking and erosion has been a lesser problem on this turbo- 
pump than for the fuel turbopump. Contamination and erosion of the 
turbine area is also a concern. Turbine area rubbing and minor 
sheetmetal cracking have also been reported. 

Nozzle - Unlike the rotating machinery, the nozzle has only a few 
problems. Cracking and leakage in the small nozzle coolant tubes 
that line the inside of the nozzle are the most common source of 
UCRs. Nozzle coolant tube leakage is caused by vibration fatigue, 
thermal fatigue, and brazing anomalies in assembly or repair. While 
these leaks are usually a nuisance item, the nozzle has been the 
source of at least one catastrophic failure. A steerhorn rupture 
caused by the use of incorrect weld wire during fabrication 
destroyed an engine on the National Space Technology Laboratories 
(NSTL) test stand. 

Sensors and Electrical Harnesses - Sensor or sensor output failures 
were a frequent problem and are to be expected in view of the envi- 
ronmental extremes associated with the SSME. Typically, temperature 
and pressure sensors had the highest failure rate. Sensor relia- 
bility is an extremely important factor in designing an on-board 
diagnostic system. To date, the only specific action taken with 
respect to a postflight data review is to replace faulty sensors or 
sensor cabling. 
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Fuel Preburner (FPB), Oxidizer Preburner (OPB), and Main Injector - 
All three of these components have similar problems even though the 
fuel preburner dominates the number of UCRs. This is probably due 
to the higher temperature and pressure in the FPB. Erosion and 
cracking of the LOX posts and injector faceplates are the most fre- 
quent subject of the UCRs on the injectors. Vibration, temperature, 
and nonconcentricity of the LOX posts are the primary causes of 
injector failures. 

Hot-Gas Manifold (HGM) - Cracking and rupture of ducting was the 
primary failure mode and this is caused by vibration loading or 
assembly error. Leakage at the joints along with loose fasteners 
which could cause leakage was also a problem. 

Main Combustion Chamber (MCC) - Most of the UCRs were written for 
erosion or cracking on the hot-gas wall of the MCC. Low-pressure 
fuel turbine drive manifold leaks were the only major failure occur- 
rences for this component. 

Heat Exchanger (HE) - There were few UCRs written for the heat 
exchanger, probably because of the extreme precautions taken during 
assembly. Small leaks of oxygen from the HE would be catastrophic, 
so even minor tolerance and clearance discrepanices were reported in 
UCRs. 

Low-Pressure Turbopumps (LPFTP) and (LPOTP) - These had problems 
similar to those for the high-pressure turbopumps, but they were 
minor in nature and much less frequent. 

Valves and Actuators - Leaks were the common thread throughout the 
UCRs on these components. Internal leakage and ball seal leakage 
occurred in various valves and actuators. Also, valves did not 
function properly due to contaminants or a noisy or erratic position 
transducer signal. 

Igniter - The igniter UCRs usually dealt with either the electrical 
connection or tip erosion failures. 
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Fuel Line, Oxidizer Line, and Drain Line Ducts - Joint problems and 
joint leakage were the focus of most of these UCRs. Weld and seal 
cracks also occurred. 

Gimbal - Wear of the gimbal and cracks in the bushing were the two 
failure modes which caused UCRs to be written for the gimbal. 

SSME Accident/Incident Reports Review 

Major failures of the SSME or its components are subjected to a 
rigorous review with the results summarized in Accident/Incident Reports. The 
eight reports written between January 1980 and December 1983 were reviewed for 
failure mode information and the value of present Instrumentation for failure 
detection. Summaries of the individual reports are contained in Appendix F. 

During this four-year period, there were no duplications of any of 
these major failures. This indicates the complexity of the SSME and the 
degree of randomness involved in the failures. The nonrepetitiveness of the 
failures is also influenced by the detailed analysis of the incidents and the 
corrective actions taken to prevent recurrence. 

Certain reports showed that human error in the SSME fabrication and 
assembly cannot totally be eliminated. The use of the wrong weld wire on the 
steerhorn portion of the nozzle caused a catastrophic failure and a welding 
mistake on the heat exchanger coil could have destroyed an engine or worse had 
it gone undetected. The UCR data reviewed has shown that human error In 
fabrication, assembly, and repair has been a constant source of problems. 

Most of the catastrophic failures occurred on test stands after the 
instrumentation had indicated an unsafe condition and shutdown procedures had 
been started. In these cases, the time between detection of the measured 
failure condition and the consequent engine destruction was much shorter than 
the time to safely shut down the engine. To correctly and safely shut down 
the SSME, deteriorating conditions must be detected earlier than is presently 
being done. Because of the random causes of these major failures, the diag- 
nostic system design should include as many of the engine parameters as is 
economically and technically possible. 
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Failure Modes and Effects Analysis Report Review 

The Failure Modes and Effects Analysis (FMEA) Report prepared by 
Rocketdyne was reviewed to evaluate failure modes to help in ranking them. 
Although it was some help for major failure types and valve procedure prob- 
lems, the FMEA Report did not contain a sufficiently thorough analysis of the 
failure modes and their propagation paths. 

Fault tree diagrams are very helpful in charting failure modes and 
their effects on the engine. Figure 6 shows an example of such a diagram for 
the hot-gas manifold. Appendix G contains fault tree diagrams for each of the 
major components. The diagrams provided in this report are not at a detailed 
piece-part level, but at the level shown, they can help with two major tasks. 
They show the cause and effect of particular failure modes in a simple graphi- 
cal fashion which determines their relevant importance and provides a means 
for diagnosis. Another important aspect of the fault tree diagram is that 
they allow the representation of failure propagation times for each step in 
the failure process, and this is important in structuring a diagnostic system, 
as indicated below. 



FIGURE 6. FAULT TREE DIAGRAM FOR HOT-GAS MANIFOLD 
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Because the time between the duct rupturing and engine fire 
(Figure 6) could be practially instantaneous, detection of such ruptures is 
too late for shutdown and would not be an effective diagnostic measurement. 
The diagram shows that cracking preceeds rupturing of the duct and may be 
detectable for many seconds before rupture occurs. If the failure could be 
detected at this level, the engine could be safely shut down and repaired. To 
detect all the causes of cracking, however, might take a prohibitive amount of 
time and be very costly. 

In many cases, the most desired failure mode to detect may be 
realistically undetectable because of the advanced level of technology needed 
or because the environment within the engine would preclude measurement. In 
these cases, ground inspection techniques for the failure modes may be 
necessary. The fault tree diagram can be used to check the completeness of 
the diagnostic system. If the system checks for cracking of the ducts, but 
fails to detect loose bolts, the diagram in Figure 6 indicates that an engine 
fire would still be a possibility. Thus, if a particular failure mode propa- 
gates very quickly and there is presently no method for detection, then it may 
be cost effective to develop an appropriate sensor. 

To conclude, the FMEA report should be greatly expanded with inputs 
from the Rocketdyne design groups for each particular component by assessing 
the thermal and vibration environment in conjunction with the design 
parameters. 

Test Firing Cutoff UCRs Review 

The UCRs that resulted from test firing cutoffs (shutdowns) from 
early 1975 through late 1983 were reviewed to assist in determining the use- 
fulness of the present sensors on the SSME for the design of a diagnostic sys- 
tem. Even though the sensors produced a significant number of improper cut- 
offs, as shown in the tables in Appendix H, there were also many shutdowns 
that were due to valid measurements. These shutdowns were usually due to 
simple signal-level-activated commands. However, several catastrophic 
failures occurred after some safety limits ("red lines") had been exceeded but 
before shutdown could be completed. 
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Figure 7 is an example of the tables of the reduced UCR data. The 
data are organized by the measurement that caused shutdown. The year of 
occurrence, the number of improper cutoffs, the criticality of the UCR, the 
place they occurred, and the determined cause and action taken are included in 
the table. If there was a valid reason for the measurement to have exceeded 
the appropriate "red line" level, it was not an improper cutoff. Of over 255 
test firing cutoffs, 41 (16 percent) were the fault of the test facility or 
the controller; 130 (51 percent) of the UCRs involved cutoffs for valid 
reasons. 

This does not, however, mean that a similar event would result in an 
engine shutdown during flight. The importance of engine power output to the 
safety of a flight is such that many undesirable conditions would be accepted, 
but the basis for an overall diagnostic system may well reside with these 
previously used basic sensors. Other activities, moreover, will be required 
to adapt these sensors. For example, signal processing techniques, such as 
frequency domain and trend analysis, may be utilized to locate specific 
failures. Outputs from several sensors may indicate a unique failure mode 
(pattern recognition). Downstream and upstream sensors can be used to vali- 
date sensor output to improve the reliability of any diagnosis. Some of these 
techniques can be used for prognostic monitoring, and with the inclusion of a 
ground-based data acquisition and maintenance computer system, the results can 
be in the maintenance personnel's hands before the Shuttle returns. Such an 
"expert system" would be too slow for on-board diagnosis using today's com- 
puter technology, but may become a viable on-board tool in the future. 

For the most part, fast-propagating and high-criticality failure 
modes are key targets for any on-board diagnostic or shutdown decisions. The 
present sensors should be helpful, but optimized placement of these sensors 
may be necessary. Also, knowledge of the background signal levels and 
expected signal levels of the failure modes is important. 

Failure Mode Ranking 

To assess the importance of each failure mode to the design of a 
diagnostic monitoring system, a procedure for ranking the failure modes was 
developed. Three factors were given equal weighting for the ranking: 
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Cost Factor - estimated cost per year of the failure 
after subtracting the cost that diagnostics 
could not eliminate 

Risk Factor - based on the criticality factor 

Time Factor - estimated time for failure mode to 
propagate to a catastrophic failure 

A detailed explanation of the ranking procedure is in Appendix I along with 
the tabulated results. The failure modes are ranked in categories of import- 
ance from 1 to 10, with 1 being the most critical and 10 the least. 

Failure modes in Categories 1 through 5, listed in Table 1, are most 
important and must be considered in the design of an on-board diagnostic 
system. In Categories 6 through 10, some failure modes may still be economi- 
cally included in an on-board system although they are not ranked very high. 
Their inclusion should depend on the additional cost involved to detect each 
failure mode. Due to economic and technical considerations, some highly-rated 
failure modes may be impossible to include in an on-board system in the near 
future, but they are important areas for research and development of either 
in-flight or ground-based detection methods. 

Measurement Parameter Analysis 

Once the importance of the failure modes to the design of a diag- 
nostic system has been evaluated, the measurements that can detect each 
failure mode must be identified and evaluated. To evaluate the measurement 
parameters, certain factors must be assessed such as signal level, background 
noise, existence of commercially available transducers, feasibility of devel- 
oping special transducers, and the information necessary to uniquely identify 
the failure modes. 

Signal level and background noise can only be roughly evaluated by 
experience and engineering judgment. An important step in evaluating signal 
levels quantitatively is to review the real-time data recordings of test stand 
and flight engine firings. Analyzing the real-time analog data should provide 
enough information to assess signal and noise levels, and may also indicate 
signal processing enhancements that would discriminate particular failure 
occurrences. 


TABLE 1. FAILURE MODE 


RANK COMPONENT 


1 HPOTP 

Heat Exchanger 

2 Hot-Gas Manifold 
Hot-Gas Manifold 
Main Injector 
HPOTP 

3 MCC 
HPFTP 

4 Sensors 
Nozzle 

Fuel Preburner 

HPFTP 

HPFTP 

HPFTP 

Ball Valves 
Poppet Valves 
Sensors 

5 Main Injector 
Fuel Preburner 
Fuel Preburner 
Fuel Preburner 
HPFTP 

HPFTP 

HPFTP 

HPFTP 

HPOTP 

HPOTP 

Check Valves 
Igniter 

Electrical Harnesses 
Electrical Harnesses 
Electrical Harnesses 
Duct Seals 
HPOTP 


RESULTS FOR RANK 5 OR ABOVE 


FAILURE MODE 


Vibration - bearing loading 
Cracks, leak in coil 

Cracks, rupture In duct 
Leak in MCC ignition joint 
ASI supply line cracks 
Bearing ball and race wear 

Turbine drive manifold leak 
G-5 joint erosion 

Temp, and press, output failures 

Steerhorn rupture 

Faceplate erosion 

Diffuser failure 

Inlet failure 

Missing shield nuts 

Ball seal leak and ball melting 

Cracked poppet 

Temperature sensor debonding 

Heat shield retainer cracks 

Baffle and LOX post erosion 

Baffle, molyshield, and liner cracks 

Missing/extra support pins 

Turbine blade and platform erosion 

Seal cracking 

Coolie cap nut cracking 

Broken turbine blades 

Turbine blade cracks 

Bearing cage delamination 

Check valve leaks 

Igniter tip erosion 

Birdcaged harness 

Loose, defective connector 

Debonded torque lock 

Seal damage 

Vibration level - cavitation 
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With reference to Figure 4, the several hundred failure modes for 
the entire engine can be reduced to about fifteen failure types. In parti- 
cular leaks and cracks are by far the most common failure type among all the 
failure modes. Each failure type has a unique signature, but since many 
failure modes have the same failure type, it may be difficult to Identify a 
particular failure mode. A brief description of each failure type, the nature 
of the signal produced, and the possibility of identifying individual failure 
modes follows: 

Leaks - Leakage of a liquid or gas from the system, or from one com- 
ponent to another within the system, can occur in several ways. It 
may be due to a crack in a structure, a bad seal, or possibly a mal- 
functioning valve. Presently, leaks are detected between flights by 
pressurizing the system with helium. The signals produced by leak- 
age for possible in-flight detection are sound, vibration, optical, 
and possibly, in some cases, temperature or engine performance. In 
most cases, the sound and vibration signals will be low when com- 
pared to the background noise, probably even at ultrasonic frequen- 
cies (acoustic emission frequencies). An acoustic emission method 
for leak detection would moreover require many transducers to detect 
all the possible places that leaks can occur even if selected as a 
between-f 1 ight method of leak detection. Optical methods such as 
holographic leak detection are still in the developmental stages and 
also have resolution problems in detecting small leaks and are more- 
over only applicable where easy access is possible (e.g., for 
external leakage). In many cases, indirect measurements such as 
temperature, flow, or pressure may infer leakage. For example, 
leakage of hot gas into coolant passages could be detected by 
temperature measurements. Also if the leakage is severe enough, it 
will affect the downstream pressure and flow. 

Cracks - Cracking of a structure is usually caused by mechanical or 
thermal loading which can eventually lead to failure of the struc- 
ture with possible secondary effects such as fluid leakage. One 
present method of detecting cracking is by measuring the acoustic 
signal in the structure's material caused by the energy released 
through the cracking phenomena. These signals are detected by 
acoustic emission transducers at a frequency dependent upon 
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material properties. High background noise, however, may be a prob- 
lem in the application of this technique to many parts of the SSME. 
Other detection methods include magnetic, electric potential, and 
mechanical impedance methods. When the cracking leads to other 
problems, detection of these failure modes may be easier. But, 
since these are secondary effects, catastrophic failure of a com- 
ponent may be imminent, and the ability to shut down the SSME with 
minimal damage at this point may be impossible. Nevertheless, pre- 
dicting cracking by trending vibration and temperature data should 
be useful in monitoring structural fatigue life. 

Erosion - Erosion of surfaces usually occurs in the hot-gas turbine 
sections of turbopumps and in injectors. In the case of injectors, 
local hot spots may indicate erosion. In the case of both turbine 
and injector erosion, the performance of the turbopump and down- 
stream components will directly be affected and should give rise to 
indicative measurements. Temperature trending of these components 
may be the most useful measurement possible in flight. Detection of 
ablated particles or, more likely, surface wear is possible in the 
case of erosion. Isotope wear detection, presently being developed 
by Rocketdyne, is considered to have the best chance of success for 
erosion detection. 

Wear - Wear is caused by surface friction on a component due to 
mechanical contact or flow impingement. Erosion is a special case 
of wear, but it has been considered in a separate category of its 
own. Wear was considered, in this study, to result from mechanical 
contact between components with relative motion. Wear in the SSME 
generally occurs in the rotating machinery, e.g. the turbopumps. 
Bearings are the most critical parts affected by wear, followed by 
seals. Rubbing usually causes vibration, and in many cases the 
nature of the vibration signal can be used to identify which parts 
are involved. For example, seal rubbing may Involve some RPM 
related vibration as well as indirect measurements such as reduced 
shaft RPM and torque. Wear is usually detected at high frequencies 
where the ambient noise is relatively low. More accurate measure- 
ments may be made by isotope wear detection (but not for pitting), 
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magnetic wear detection, or ultrasonic doppler transducer. Magnetic 
wear detection measures the ball passage frequency. Ultrasonic 
doppler transducers can detect the shaft vibration, and should be 
more sensitive to bearing wear than vibration of the housing. 
Detection of worn particles or surface wear is also possible, as in 
the case of erosion. Isotope wear shows the most promise in this 
category. All these wear detection methods, moreover, are nonintru- 
sive. Another possible wear measurement device, the fiberoptic 
deflectometer, however, would be intrusive. 

Dings, Dents, and Damage - This is a general category that usually 
relates to debris impacting a part of the SSME. This can usually be 
detected by vibration sensors as a high-energy impulse signal. 

Electrical - Electrical problems is this study relate to sensors, 
sensor cabling, and electrical connections. Many systems presently 
can self-check for continuity and other transducers can be used to 
verify the validity of a sensor's output (analytic redundancy), 
rather than using multiple sensor redundancy to increase sensor 
reliability. 

Contamination - Contamination is a broad category of foreign depo- 
sits or objects present in a component. In most cases there is 
little or no effect, but problems such as reduced coolant flow 
through passages and impaired valve operation can occur. The 
effects of contamination can manifest themselves in different ways, 
but temperature, flow, and pressure measurements generally provide a 
good indication of a serious contamination problem. 

Del ami nation and Broken Parts - These failure types are further 
extensions of cracking and several other failure types previously 
discussed. When a part fails structurally, the vibration signal 
will increase dramatically in most cases, but catastrophic failure 
of the engine may also be imminent. 

Loose Parts - This cateogry usually refers to connections involving 
bolts or other fasteners. The possibilities for detection include 
increased vibration levels, an optical method, and measurement of 
torque on the bolt. 
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Missing/Extra Parts - This failure type is usually a problem with 
stud keys or other small parts that are installed in large quanti- 
ties. Inspection and verification during assembly or between 
firings is the only way to directly detect missing or extra parts. 
One verification method might involve accurately weighing subcom- 
ponents before final assembly. Missing/extra parts may also result 
in another failure type that may be detected in flight, e.g. loose 
bolts. 

Torque, Vibration, and Excess Travel - These measurements have all 
been used as criteria for assessing turbopump condition. All three 
have the potential for being performed in flight and could be used 
in combination to adequately evaluate turbopump condition. 

Tolerance - Tolerance problems can possibly be detected in flight by 
optical methods, but ground inspection is usually required. Optical 
methods for enhancing ground-based inspection of injector parts 
could possibly save time, but these techniques will need extensive 
development. 

Information on potentially useful transducers for detecting particu- 
lar failure modes came from several sources including the diagnostic survey 
conducted as part of this study, the Rocketdyne Reusable Rocket Engine Main- 
tenance Study, Final Report , and Battelle's past experience. Detailed des- 
criptions of several promising sensors and diagnostic techniques are included 
in this section's recommendations or in the section covering the diagnostic 
survey. 

To evaluate diagnostics for detection of particular failure modes, a 
Battelle developed tool, the Failure Information Propagation Model (FIRM), has 
been used and is described in detail in a subsequent section of this report. 
This tool can be used to evaluate the information at a transducer location and 
to assess the ability of the entire transducer set to Identify engine failure 
modes. 

The results of the measurement parameter analysis for each compoent 
are described in tabular form in Appendix J. A sample table of results is 
shown in Figure 8. The failure modes, their causes, rankings, and effects are 
listed in the tables. The possible measurable parameters for each failure 
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mode are listed along with possible in-flight and between-f light sensors or 
techniques. Additional comments are also supplied to Indicate relative 
strengths and weaknesses of the measurement techniques. 

For most failures, the possibility exists to trend or detect their 
occurrence with conventional transducers that are already being used on the 
SSME. The problem is that current engine transducers may not be strategically 
located for detection of many of these failures. Knowledge of the signal con- 
tent is also insufficient to differentiate between the many possible failure 
modes detectable by a given transducer. There are also some transducing 
methods that need development, but which have excellent promise for detecting 
failure modes which are undetectable by conventional methods. 

The use of sensor data for failure trending could reduce the amount 
of between-f 1 ight inspections. Any failure mode that involves a slow degrada- 
tion or fatigue type of failure could be trended. Detailed descriptions of 
measurements that can be used for trending particular failure modes are 
included in the measurement parameter tables in Appendix J. Many fatigue 
failures in the turbopumps and other components can be trended with mechanical 
and thermal load history information obtained by accelerometers, other vibra- 
tion transducers, and temperature sensors. Injector and hot-gas component 
erosion can be trended with temperature measurements and, in some cases, pres- 
sure measurements. 


Conclusions 


The conclusions drawn from the failure modes and measurement para- 
meter analyses are: 

• Turbopumps have the highest priority for in-flight monitoring, 
but many other components also have high-ranking failure modes 
which must be considered. 

• Major accident failure modes have been random in nature and the 
commonly recurring failure modes generally have not been to 
blame. Many of the major accidents were due to either assembly, 
manufacturing, or design problems which must be considered in the 
development of a diagnostic system. 
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• Presently, many failure modes are detected too late to safely 

shut down the SSME with minimal damage. The propagation rate of 
many failure modes provides an extreme challenge in designing an 
effective diagnostic system. 

• Test firing cutoff UCR data reveal that the present sensors can 
be valuable for reliably diagnosing many failure modes. This 
could and should be achieved with proper signal processing, pat- 
tern recognition (unique combination of sensor outputs), analy- 
tical redundancy (correlate outputs from upstream and downstream 
sensors), and development of more rugged sensors and cabling. 

• Some recently developed and novel sensors could be useful for 

detection of critical failure modes, especially in the high-speed 
turbopumps. Some of these can target key failure modes that may 
be masked from conventional sensors. They are described in the 
diagnostic survey discussion or in this section's recommen- 
dations. In many cases, there will be a great deal of develop- 
ment required before these new sensors are flight ready. The 
most immediate gains may be made by improving the use of the 

present sensors. 

• Many slow-developing fatigue or wear related failures can be 

trended by information from conventional sensors, both to predict 
eventual failure and to reduce the amount of between-f light 
inspections. Such applications are possible for many turbopump 
and injector failure modes. 

Recommendations 


Diagnostic monitoring of the SSME can be improved by better use of 
present instrumentation, installation of more conventional sensors, and use of 
some recently developed sensing techniques which target specific failure 
modes. Three important steps for improving flight safety and maintenance 
costs are: 

• Design of an integrated diagnostic system including both 
in-flight monitoring and ground inspection and maintenance. 
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• Improving failure diagnosis with conventional sensors by analysis 
of present flight and test firing data as well as assessment of 
signal processing and enhancement techniques to identify failure 
modes. 

• Further development and testing of promising sensing techniques 
which target costly and hazardous failure modes that are diffi- 
cult to detect with conventional sensors. 

To design an effective diagnostic system for reduction of mainten- 
ance costs, turnaround time, and catastrophic failure risk; failure informa- 
tion in the entire SSME must be evaluated. The Failure Information Propaga- 
tion Model (FIPM) is being used to evaluate failure information for all possi- 
ble failure modes on the high-pressure oxidizer turbopump and assess sensing 
opportunities at various locations in the turbopump. Once the FIPM is com- 
pleted for all components, a qualitative evaluation of a complete SSME diag- 
nostic system can be made. The FIPM will help determine how better to use 
conventional and advanced technology sensors for in-flight monitoring and 
trending of information in conjunction with necessary ground inspections. An 
important aspect in the design of the complete diagnostic system is to incor- 
porate an effective computerized information system for data processing and 
retrieval. Such a system would give maintenance personnel the relevant infor- 
mation to quickly assess and complete between-f light inspection and main- 
tenance and would also be adaptable to Incorporate new diagnostic 
developments. 

There are many opportunities to improve the capabilities of the pre- 
sent sensor set as well as possible additional conventional sensors. The key 
to developing the use of these sensors is analyze the recorded analog flight 
and test firing data. By looking at the full bandwidth of the sensors, com- 
bining various sensor outputs, and correlating the signals with the known 
failure occurrences, diagnosis of many failure modes may be improved. Also, 
the FIPM can be useful in identifying possible applications for the present 
sensors and situations where additional conventional sensors would be helpful. 
The reliability problems of the present conventional sensors can be attacked 
by technological gains in hardening the sensors and through analytical 
redundancy in checking the validity of the sensor outputs. Analytical 
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redundancy could reduce the number of sensors needed and thus reduce the 
amount of sensor repair and replacement. Specific applications are detailed 
in the measurement parameter tables in Appendix K. 

Some new sensors may see applications on the SSME in the next couple 
years and others could be developed for use on the engine within five years. 
Most of these new or additional sensors target specific failure modes that are 
both costly and not presently detectable by conventional sensors. A list of 
the most promising sensors or sensing techniques follows: 

Partially Developed and Tested 

• Isotope Wear Detection - Between-f light noninstrusive detection 
of slowly developing wear-related failure modes. Potential uses, 
mainly in the turbopumps, include bearings, seals, and turbine 
blades. Cannot detect cracking or pitting. Presently being 
tested by Rocketdyne with funding from NASA LeRC. 

• Ultrasonic Doppler Transducer - Nonintrusive means of detecting 
shaft vibration through solid and liquid interfaces. Extremely 
sensitive to imbalance and other RPM related vibration and may be 
useful for detecting other failure modes on the information rich 
shaft assemblies of the turbopump. It can detect cavitation, 
bearing wear, and seal rubbing. Developed by Battel le and tested 
at NASA MSFC in the mid-70's. 

• Fiberoptic Def lectometer - Possibly more durable than conven- 
tional accelerometers and can potentially target specific vibra- 
tion problems that need intrusive measurement capabilities such 
as bearing wear. Presently being tested at NASA LeRC by 
Rocketdyne. 

• Ultrasonic Flowmeter - Has been tested as a means of nonintru- 
sively measuring flow through ducts. The mounting conditions, 
however, have caused a duct to rupture. With proper design of 
the duct and transducer mounting, this sensor is believed to be a 
reliable method of detecting flow rate. 



33 


• Optical Pyrometer - For possible trending of turbine blade crack- 
ing. May have resolution and calibration problems, but there is 
no other acceptable method of detecting this failure mode at pre- 
sent. Under test by Rocketdyne with funding by NASA LeRC. 

• Borescope Image Processor - Off-the-shelf packages are available 
to enhance the visual inspection of internal parts. New genera- 
tion borescopes may be much better for low-light situations. 

Devices with Major Development Efforts Needed 

• Magnetic Wear Detector - A small experiment at Battel le showed 

that the ball passage rate can be monitored by a Hall -effect 
sensor. Bearing ball wear will change the contact angle and thus 

the ball speed. If the signal can be cleaned up enough, higher 

order effects may also be detected. Could be used as either a 
flight sensor or ground inspection method. 

• Acoustic Emission Detectors - Possible in-flight applications for 

detecting cracks and leaks of quickly propagating failure modes. 

May have resolution problems in high background noise environ- 

ment. Cracks and leaks are by far the most predominate types of 
failures. 

• Laser Doppler Velocimeter - Can measure flow speed and direction, 
but needs access via an optic fiber through a hole or "window". 

• Tracers Added to Helium Leak Detection - A radioactive tracer 
(Krypton, Tritium, etc.) could improve leak detection for ground- 
based applications. 

• Holographic Leak Detection - Has the possibility of detecting and 
locating leaks faster and more effectively than the present 
helium method. Being investigated in a detailed Rocketdyne 
study. 

• Exo-Electron Emission - May be useful in ground inspection for 
cracked parts. Also detailed in Rocketdyne study. 

All of the above measurement applications should be evaluated for cost effec- 
tive means of improving the present diagnostic system, but the most immediate 
improvements should come through studying the on-board sensors. 
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DIAGNOSTICS SURVEY 


A survey of the state of the art of machine diagnostics was per- 
formed as the second task in the SSME study. In this survey, a general look 
was taken at the area of machine diagnostics across three rather broadly 
defined application areas: 

1. Diagnostics for liquid-fueled rocket engines, 

2. Diagnostics for aircraft engines, 

3. Diagnostics in relevant non-aerospace industries. 

The survey involved interviews with experts in a broad range of industries, 
NASA, and the military. In addition, relevant Battelle experts were inter- 
viewed and the literature was reviewed. The current diagnostic methods for 
the Space Shuttle Main Engine (SSME) were also examined and the relevant 
survey findings were identified for potential use on the SSME. 

Survey Approach and Methodology 


Approach 


This diagnostic survey has two objectives: (1) the determination of 

the state-of-the-art of machine diagnostics, and (2) the identification of 
new, candidate diagnostic techniques and/or approaches for potential applica- 
tion to the SSME. Throughout this effort, the focus is on those techniques 
that are considered to be off-the-shelf, or mature areas of research and 
development. 

The intent of the diagnostic survey is to be broad, spanning as wide 
a spectrum of industries as possible. Within the general area of machine 
diagnostics, three topics are considered: 

1. Maintenance logistics and strategies, 

2. Diagnostic techniques, 

3. Design approaches for diagnostic systems. 


PRECEDING page blank not filled 
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Because of its breadth, this study does not attempt to focus on any 
specific technique or approach in great detail. Throughout the survey, only 
enough detail was sought to permit an assessment of the usefulness of the 
techniques under study. 

Methodology 

There are two phases in diagnostics survey, a state-of-the-art sur- 
vey and the subsequent assessment of the survey findings. For the survey 
phase, we selected three application categories: 

1. Diagnostic systems for liquid rocket engines, 

2. Diagnostic systems on civil and military aircraft, 

3. Diagnostic systems in non-aerospace industries. 

Information was gathered using literature reviews and interviews 
with a number of industry, government, and military experts. Figure 9 depicts 
the overall survey strategy. 


INDUSTRY 



INTERVIEWS 


FIGURE 9. STRATEGY FOR STATE-OF-THE-ART SURVEY OF MACHINE DIAGNOSTICS 
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The second phase of the Diagnostics Survey was a preliminary assess- 
ment of the survey findings to screen out those that were not considered rele- 
vant to the SSME. This was done in two steps: 

1. The diagnostic systems and maintenance strategy currently 
employed for the SSME were reviewed. 

2. The survey findings were reexamined in light of the current SSME 
environment, and those that were not considered useful were 
dropped. 

Information sources for the review of current SSME diagnostic sys- 
tems and maintenance practices were NASA and Rocketdyne experts, and selected 
published reports. 


Diagnostics Background 

By its very nature, machine diagnostics encompasses a broad set of 
disciplines. Much of the scientific knowledge necessary to design and fabri- 
cate machines, as well as to understand the physics of their failures, falls 
under the technological umbrella of machine diagnostics. Because of this 
breadth, it is necessary to provide an organization through a hierarchy of 
related functions. This organization results in a logical, manageable set of 
elements. 

Definitions 


We begin our discussion with a set of definitions to remove ambi- 
guity in terminology. The following are taken from Reference 3-8: 

• FAULT DETECTION - the act of identifying the presence of an 
unspecified failure mode in a system resulting in an unspecified 
malfunction. 

• MALFUNCTION - an inability to operate in the normal manner or at 
the expected level of performance. 

• FAULT ISOLATION - the designation of the materials, structures, 
components, or subsystems that have malfunctioned. Fault Isola- 
tion extends fault detection to the detection/identification of 
the specific part that must be repaired or replaced in order to 
restore the system to normal operation. 
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• FAILURE DIAGNOSIS - the process of identifying a failure mode or 
condition from an evaluation of its signs and symptoms. The 
diagnostic process extends fault isolation to the detection/ 
identification of the specific mode by which a part or component 
has failed. 

• FAILURE MODE - a particular manner in which the omission of an 
expected occurrence (or performance of a task) happens. 

By examination, the universe of states for any given system may be 
partitioned into two overlapping regions, operational states and faulty states 
(see Figure 10). This partitioning does not, however, produce a dichotomy, 
and there is overlap between the two regions. 



FIGURE 10. PARTITIONING OF SYSTEM STATES INTO OPERATIONAL 
AND ERRONEOUS STATES. 

Notice the Overlap. 


This area of overlap represents states of degraded system perform- 
ance. In general, the region of operational states represents the control 
domain, whereas the faulty states, constitutes the domain of fault detection, 
fault isolation, and failure diagnosis. The above definitions can now be 
rewritten so that they are in terms of these states. 
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• FAULT DETECTION - the identification of a system state lying 
within the region of faulty states. 

• FAULT ISOLATION - identification of a class of system states 
within the region of faulty states which classify the malfunction 
of a specific module or component. 

• FAILURE DIAGNOSIS - identification of a system state within the 
region of faulty states which classifies a specific failure mode 
of the malfunctioning module or component. 

• STATE IDENTIFICATION - the determination of the condition or mode 
of a system with respect to a set of circumstances at a particu- 
lar time. 

In addition to redefining some of the diagnostic-related elements, 
one can also express the concept of control in terms of system states. 

• CONTROL - the identification of a current system operational state 
and the subsequent adjustment of the system so as to maneuver it 
to another desired operational state. 

From the above discussion the following, self-evident conclusion 

results: 


All types of detection associated with error perception, 
fault isolation, failure diagnosis, and system control are 
classes of state identification. 


This conclusion is quite important in that it allows the grouping of 
the various facets of machine diagnostics, fault detection, fault isolation, 
and failure diagnosis under the more general topic of state identification. 
Additionally, since detection for control purposes is also a class of state 
identification, the importance of considering both the machine diagnostics and 
control in an integrated fashion is emphasized. Therefore, there exists a 
common denominator, state identification, around which this study is logically 
focused. 


State Identification Process Hierarchy 

One can specify a hierarchy of elements that are necessary for the 
state identification process. First, at the lowest level. Information about 
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the system or machine in question must be gathered. Second, once this infor- 
mation has been gathered, it must somehow be reduced to a manageable set of 
relevant features. Finally, at the highest level, that set of features can be 
used to perform the state identification. This hierarchy of functions is 
shown in Figure 11. 


STATE IDENTIFICATION 


INFORMATION REDUCTION 


INFORMATION ACQUISITION 


MACHINE OR SYSTEM 


FIGURE 11. THE HIERARCHY OF PROCESS REQUIRED FOR STATE IDENTIFICATION 


Information Acquisition 

The potential sources of information about a given system or machine 
necessary for state identification are: specifications, history, sensors, and 
inspection. Optimally, all of these are utilized in the state identification 
process for machine diagnostics. 

Specifications . Specifications are those documents which define the 
normal operating characteristics of the system or machine. Deviations from 
this norm may be caused by component failures, design errors, or both. 

If a given system is operating according to specifications, it is in 
that sector within the region of operational states which does not overlap 
with the region of faulty states (see Figure 10), otherwise it is in the 
region of faulty states. The specifications define the performance explicitly 
for the system controller, and implicitly for the system fault detection 
mechanism. 


History . History about a system or machine's performance can be of 
a short-term or long-term nature. Short-term history represents those events 
which are related to one another and take place within the physical or char- 
acteristic time cycles of the machine. For example, all events occurring 
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within the decay time for a pendulum might be considered short-term history. 
Long-term history consists of those events which occur in a time frame greater 
than that considered to be short-term (as previously defined). Observation of 
all events, whether they are of short-term or long-term historical nature are 
made using sensors or by inspection (see below). 

Sensors . The transducers that measure the various physical para- 
meters. Sensors may either be permanently installed on-board a machine or 
used as part of test instrumentation. The sensor output information is often 
called raw data. This raw data must be reduced to a set of features in order 
to perform state identification for diagnostic or control purposes. 

Inspection . Inspection techniques are often used in lieu of sen- 
sors. In effect, a human serves the function of a wide-band sensor. Some 
tools are available to assist the human during the inspection process. The 
physician's stethoscope is an example of such a tool. 

Information Reduction 


Having acquired information about the performance of a machine or 
system, it must be subsequently processed and reduced to produce a set of 
features from which to perform the state identification. Usually, this part 
of the process involves the reduction of the information by removing that 
which is redundant or irrelevant. Sometimes data from several sources are 
combined to generate features which cannot be or which have not been physi- 
cally measured at a single place or time. A commonplace example of this is 
the combination of sensory data about a machine, along with its long-term 
history, in order to derive a feature which describes a machine's failure 
trends. 

There are two principal means by which this reduction of information 
takes place, signal processing and/or human expert analysis. The difference 
between these two approaches may be seen simply as the difference between 
machines and humans. Signal processing can be accomplished in a number of 
machine domains: 

• Analog electronics (continuous or discrete), 

• Other analog domains, 
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• Digital electronics (hardware only), 

• Hardware and software. 

Human expert analysis may be accomplished with or without the 
assistance of mechanized tools. A mechanic listening to the noise of an auto- 
mobile engine to discern the tapping of a valve exemplifies the later case. 
An automotive engineer observing the output of an acoustic spectrum analyzer 
to make the same determination represents the former case. 

State Identification 


Having acquired information about a system or machine, and subse- 
quently generating a set of relevant features, the state identification must 
be performed. As is the case with information reduction, the same identifica- 
tion can be carried out either by humans or automated devices. 

In general, there are three approaches for automated state 
identification: 

1. Pattern recognition (with the most trivial case being a table 
lookup) . 

2. Nonlinear filters (with the simple algorithm representing the 
most trivial case) . 

3. Expert systems. 

In the specific cases where state identification is used for error 
detection or fault isolation, a fourth technique is at our disposal, i.e., 
voting. In the voting process, a society of identical hardware modules oper- 
ate in parallel to highlight any nonconformists (malfunctioning modules). 

Human-based decisions (state identifications) are the most common in 
the diagnostic/maintenance areas. In the vast majority of these cases, the 
expert has no assistance (other than perhaps another human expert). Recently 
however, the use of computer expert systems as decision aids is gaining 
acceptance. Witness, for example, the increasing commercialization of 
computer-based expert systems to assist in medical diagnosis. 
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Summary and Conclusions 

In an effort to find a common denominator for the various aspects of 
machine diagnostics (namely fault detection, fault isolation, and failure 
diagnosis), it was determined that all were classes of the more general 
process of state identification. In addition, it was concluded that detection 
for control purposes was also a class of state identification. 

The process of state identification can be thought of as a hier- 
archy. First information must be gathered about the system in question. 
Then, the information must be reduced to a set of features. Finally, based 
upon those features, an identification of the system state may be 
accomplished. 

Viewing this hierarchy from the perspective of machine diagnostics 
versus machine control, we can gain insight into the interaction between those 
two functions. Revising the pyramid of Figure 11 we obtain that of Figure 12. 
It is evident from the above discussion that machine control requires many of 
the same elements as do machine diagnostics. As shown in Figure 12, there is 
every reason to expect that a sharing of hardware between the control and 
diagnostic functions is both possible and desirable. Reliability theory tells 
us that the addition of any component into a system will always increase the 
likelihood of failure--even though the component may serve a diagnostic 
purpose (it is possible that system reliability could be increased if the 
addition of the component in question added redundancy of some type). By 
allowing control and diagnostic functions to share resources, system relia- 
bility is kept to a maximum. Because diagnostics help to reduce system down- 
time, once a failure has occurred, system availability is improved. 



FIGURE 12. MACHINE CONTROL VERSUS MACHINE DIAGNOSTICS. 

NOTE THE OPPORTUNITY FOR SHARING RESOURCES 
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Taking the elements from the above hierarchy and using the class- 
ifications discussed earlier in this section. Table 2 is formulated. We are 
now in a position to use this classification as a tool for organizing the 
results of our diagnostic survey. 


TABLE 2. BREAK-DOWN OF THE DIAGNOSTIC HIERARCHY 


DIAGNOSTIC 

AUTOMATED 

DECISION 

PATTERN RECOGNITION 

NOMLEAR FILTERS 

EXPERT SYSTEMS 

VOTING SYSTEMS 

HUMAN EXPERT 
OPINION 

HUMAN ONLY 

MACHINE ASSISTED 

INFORMATION 

REDUCTION 

SIGNAL PROCESSING 

ANALOG ELECTRONICS 

OTHER ANALOG DOMAINS 

DIGITAL ELECTRONICS 

HUMAN EXPERT 
ANALYSIS 

HUMAN ONLY 

MACHINE ASSISTED 

INFORMATION 

SOURCES 

SPECIFICATIONS 


HISTORY 

SHORT TERM 

LONG TERM 

SENSORS 

ON-BOARD 

TEST INSTRUMENTATION 

INSPECTION 

HUMAN ONLY 

MACHINE ASSISTED 


SSME Diagnostic and Maintenance System Overview 

This section presents a brief description of the SSME diagnostic and 
maintenance system. It should be noted that the current maintenance/ 
diagnostic structure is highly complex. In the interest of brevity, the 
elements chosen represent rather coarse groupings of the numerous related 
components. Nevertheless, it is felt that the categorizations are accurate 
and that the description is therefore a good representation of the diagnostic 
system. 

The diagnostic system elements for the SSME may be broadly cate- 
gorized as either "on-board" or "ground-based". For the sake of this dis- 
cussion, by the term "on-board" we mean those diagnostic elements that are 
physically close to the engine, whether it is flying on a Space Shuttle or 
operating on a test stand. "Ground-based" elements of the diagnostic and 
maintenance system are those that are not considered to be on-board ("every- 
thing else"). 
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In addition to the "ground-based" versus "on-board" categorization 
of the SSME diagnostic elements, they may also be classified according to the 
diagnostic hierarchy discussed in the previous section. There are a number of 
levels in the hierarchy, the lowest of which is the plant level (the level 
containing the engine itself). The next-to-the-bottom level can be thought of 
as the information gathering level. All elements which have a role in the 
acquisition of information about the plant's (engine's) performance belong to 
this level. Control actuators also reside at the information gathering level. 
The next-to-the-highest level is termed the information reduction level. It 
is here that any signal processing or conditioning occurs. Finally, the 
highest level is termed the decision level. At this level, diagnostic and 
control decisions are made. 

Based upon the previously described hierarchical organization we can 
identify (albeit somewhat broadly) the various elements that comprise the 
diagnostic system for the SSME. Such an overview is given schematically in 
Figure 13. It must be noted that those elements which are classified as 
on-board (including crew) are meant to apply to test stand firings as well as 
in-flight service. 



FIGURE 13. OVERALL SSME DIAGNOSTICS AND MAINTENANCE PICTURE 
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Information Gathering 

There are two on-board elements which provide the function of data 
acquisition: crew perceptions and on-board sensors. The crew perceptions are 
those observations of the flight crew on the Orbiter, and the support staff 
during test stand engine firings. These observations are results of the 
physical senses and should not be confused with information presented to the 
crew by the diagnostic subsystems. 

A number of on-board sensors are used primarily for control pur- 
poses. The remaining sensors are dedicated to diagnostic functions. Some of 
the control related sensor outputs are also used for diagnostic purposes. 

Aside from the data acquisition function, there are on-board ele- 
ments for data telemetry and data recording. Nearly all sensor outputs are 
ultimately telemetered for ground-based analysis. A number of these data are 
also recorded on-board the Orbiter. 

On the ground-based side, a large amount of diagnostic data comes 
from between-f 1 ight inspections. Data acquired by on-board subsystems are 
ultimately integrated with the results of ground-based inspections and engine 
repair actions to establish the engine flight and service history. This his- 
torical data represents a valuable information pool for detailed analysis. 

Information Reduction 


All of the data, whether acquired by sensor, observation, or between 
flight inspection must be reduced to a manageable set of features so that the 
appropriate diagnostic or control decision may be quickly and accurately made. 
Sensor data is characteristically reduced using signal processing techniques 
such as time integration or low-pass filtering. Observations and inspection 
results are typically reduced by the inspection specialists through the use of 
heuristics. 

Diagnostic Decisions 


The on-board diagnostic subsystem uses a basic form of pattern 
recognition. A table of "red lines", dynamically adjusted for changes in the 
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engine's operational modes, is employed to flag potentially dangerous condi- 
tions and dictate responses. Similarly, the crew reactions represent a human 
pattern recognition resulting in well practiced responses. 

Currently, the ground-based analysis employs an analytical model of 
the engine combined with heuristic-based decisions to identify potential 
trouble spots. This information is used to some degree to direct the between- 
flight inspections, and aids in the maintenance evaluations and repair 
decisions. 

\ 

Summary / 


This section has presented a high level overview of the SSME 
diagnostic and maintenance system. The various diagnostic and maintenance 
elements as well as their interactions (or possible interactions) have been 
described and are depicted in Figure 13. The intent of the state-of-the-art 
diagnostic survey is to identify possible techniques to improve the per- 
formance of those elements and/or to improve the quality of their interconnec- 
tions. 


Survey Findings 

This section presents the significant findings and highlights of the 
state-of-the-art diagnostic survey. These findings are broken down into three 
major application areas: 

1. Liquid-fueled rocket engines, 

2. Aircraft, 

3. Non-aerospace industries. 

Within each application area, the findings are further organized 
according to the hierarchical classification discussed in the previous 
sections. 

Liquid-Fueled Rocket Engines 

The principal sources of information for this part of the survey 
were rocket engine manufacturers, instrumentation vendors, Battelle experts, 
and NASA reports. 
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The SSME is unique in that is the first truly reusable rocket engine 
not on an experimental vehicle. This fact, combined with a design which 
allows for smaller error margins than previous rocket engines, has dictated a 
much more comprehensive diagnostic and maintenance philosophy than any of its 
predecessors. 

Data Acquisition . The vast majority of the sensing and instrumenta- 
tion techniques are based upon well-seasoned approaches. In the case of 
on-board devices, such well-established transducers as thermocouples, pressure 
sensors, accelerometers, etc. are typically used. The data from these trans- 
ducers are usually telemetered for ground-based analysis. Historically, manu- 
facturers have not had a great deal of confidence in on-board instrumentation. 
Rocketdyne is currently under contract with NASA to develop new instrumenta- 
tion as a part of an advanced condition monitoring system. 

Ground-based inspections are characteristically manual in nature. 
Some instruments such as mass spectrometers have found application in the iso- 
lation of gas leaks. Some new techniques for data acquisition have been pro- 
posed and/or are under development, but none of those are yet considered to be 
mature products. 

Signal Processing . Because of the basic nature of the diagnostic 
systems employed on prior rocket engines, minimal on-board signal processing 
techniques were used. The techniques used are basic in nature and have as 
their objective the enhancement of the signal-to-noise ratio or sensor sig- 
nals. Ground-based analyses of telemetered data characteristically employ 
more sophisticated approaches. 

Diagnostic Technigues . The sophistication of the diagnostic techni- 
ques used on-board previous rocket engines has been minimal. The most common 
real-time monitoring technique was based upon the violation of limits or "red 
lines". Post-flight analyses, were usually more thorough, relying on tools 
such as computer simulations. 

Highlights . Items of particular interest which were obtained during 
the liquid rocket engine portion of the survey include: 
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Awareness of Need for Diagnostics. All of the manufacturers of roc- 
ket engines that were interviewed (Rocketdyne, Pratt and Whitney, and Aerojet) 
indicated an awareness of the need for comprehensive diagnostics on reusable 
engines. Rocketdyne, due to its involvement with the SSME, has already 
embarked on the development of a comprehensive condition monitoring system. 
Both Aerojet and Pratt and Whitney intend to develop such systems on future 
engine programs. 

Current SSME Diagnostics. The engine monitoring system currently 
employed on the SSME has been successful from the standpoint of crew/vehicle 
safety. However, it is labor intensive and does not lend itself well to the 
quick turnaround objectives of the STS program. The on-board diagnostics are 
based upon violations of a series of safety limits ("red lines") some of which 
are dynamically allocated. The on-board sensor set includes the following: 

• temperature - resistive temperature detectors, thermocouples 

• pressure - strain gauge, piezoelectric 

• tachometer - magnetic pickup 

• position - potentiometers, RVDT, LVDT 

• vibration - piezoelectric accelerometer 

• flowmeter - turbine 

• calorimeter - thermopile 

• radiometer - foil. 

These sensors are considered by Rocketdyne to be adequately reli- 
able. Data from some of these sensors are telemetered for ground-based 
recording at 20 millisecond intervals during engine firings. The ground-based 
portion of the diagnostic system is centered around a series of routine and 
periodic inspections. The routine inspections include the following: 

• external inspection 

• internal inspections - HPFTP, HPOTP, MCC 

• leak tests 

• automatic/electrical checkouts. 

Borescopes are used for some of the internal inspections. Instru- 
mentation required for leak tests includes flowmeters and mass spectrometers. 
The periodic inspections involve the removal of either the HPOTP, HPFTP, or 
both. During this activity turbine blades are Inspected using optical 
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microscopy, and the respective preburner sections are inspected visually and 
with concentricity gauges. In addition to the physical inspections of the 
various engine components, the recorded flight sensor data is reviewed to 
identify anomalies. The results of this review are communicated to the 
inspection team when any action is deemed necessary. 


Future SSME Condition Monitoring System. Rocketdyne is currently 
under contract with NASA LeRC to develop an advanced engine condition moni- 
toring system. The first phase of this study involved an analysis of failure 
reports for a number of liquid-fueled rocket engines, including the SSME, J-2, 
H-l, F-l, RS-27, Thor, and Atlas. The failure reports were reduced by succes- 
sive screening and the resulting reports categorized into sixteen general 
failure types. 


• bolt torque relaxation 

• coolant passage splits 

• joint leakage 

• hot-gas manifold transfer tube 

• high torque 

• cracked turbine blades 

• failure of bellows 

• loose electrical connectors 


• bearing damage 

• tube fracture 

• turbopump face seal leakage 

• lube pressure anomalies 

• valve fails to perform 

• valve internal leakage 

• regulator discrepancies 

• contaminated hydraulic 
control assembly. 


Sensors were subsequently evaluated based upon their ability to aid 
in the detection of the sixteen failure groups. An implicit philosophy during 
this selection process was that one sensor (or group of sensors) would be 
dedicated to each failure mode. A number of state-of-the-art and novel con- 
cepts were identified. The sensors selected from those concepts were: 

• fiberoptic def lectometer a ultrasonic flowmeter 

• optical pyrometer • digital quartz pressure sensor 

• isotope wear detector • holographic leak detector 

• tunable diode-laser spectrometer • thermal conductivity leak detector 

• ultrasonic thermometer • exo-electron fatigue detector 

• optical tachometer • connector continuity checking 

• particle analysis. 
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Ultimately, the first three of these concepts were identified for 
development and testing. This program is currently in progress. Another of 
the sensors mentioned above, an ultrasonic flow meter, was tested during an 
NSTL test firing. Because of problems arising from the sensor mounting, a 
duct rupture occurred precipitating a catastrophic engine failure. 

In addition to the identification of applicable sensors, the study 
identified and evaluated the required signal processing techniques for use 
with sensors to isolate the various failure modes. These techniques are: 


• amplitude histogram 

• RMS histogram 

• filtered histogram 

• cross correlation 

• transfer function 

• product histogram 

• ratio histogram 


• differentiated histogram 

• phase diagram histogram 

• time profile 

• power spectrum density 
e integral over threshold 

• RPM profiles 

• Cambell diagram 


The various instrumentation vendors interviewed provided information 
regarding many of the currently implemented SSME and aircraft test programs. 
However, little information was obtained regarding new or novel instrumenta- 
tion concepts. 


Ultrasonic Doppler Vibration Sensor. Under contract with NASA MSFC, 
Battel le's Columbus Division developed a shaft vibration sensor and success- 
fully tested it on a J-2 rocket engine. The sensor was of a non-invasive 
nature and determined the velocity of shaft vibrations by measuring doppler 
shifting from reflected ultrasonic waves. Although a success, this sensor was 
never developed further or utilized. 

Aircraft 


Sources for this part of the survey included interviews with experts 
from the military, commercial air carriers, airframe manufacturers, engine 
manufacturers, and instrumentation vendors. Information was also gathered 
from literature and interviews with Battelle experts. 
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Aircraft engines and their diagnostics have received considerable 
attention over the years. This attention is due to a number of factors, 
including the military's emphasis on weapon system availability, the civilian 
air carriers' push to minimize maintenance costs, and the FAA's desire to 
assure safety and reliability. Consequently, this part of the survey yielded 
a good deal of relevant information. 

The current diagnostic/maintenance philosophies in the Air Force and 
the civilian air carriers are similar. The Air Force is attempting to estab- 
lish a policy termed "retirement for cause". This concept is most easily 
described as an interactive preventative maintenance program. Component 
failures are carefully analyzed and accurate life indicators are derived for 
the engine components. The components will then be replaced only when a com- 
ponent is deemed to have degraded sufficiently that it will not last until the 
next periodic maintenance cycle. 

The air carriers have a slightly different approach to maintenance. 
Given the need to reduce ground time and keep the aircraft flying as much as 
possible, a modified life limit approach to maintenance seems to prevail. An 
engine is used until a component failure occurs, albeit in some cases an inci- 
pient failure, or until life limits dictate a scheduled repair cycle. If the 
engine is being repaired after a component failure, additional components 
which would exceed their life limit prior to the next scheduled repair cycle 
may be replaced. 

Both the military and the commercial carriers employ a multi-tiered 
maintenance structure. The first level is that of the flight line at which 
major modules are replaced. A second level is responsible for troubleshooting 
the modules that have been replaced so that they may be quickly placed back in 
inventory. The third (ultimate) repair level is that of the specialized 
shops. This level may also include the equipment vendors. Here the damaged 
components are repaired and returned to the inventory of good parts. 

Data Acquisition . Commercial aircraft engines all come equipped 
with an array of accelerometers, temperature sensors, flow meters, pressure 
transducers, and tachometers. The presence of some of those transducers is 
due to FAA requirements placed on the manufacturers. While all of the air- 
lines use the majority of the installed sensors, there has been some mistrust 
of the accelerometers. Historically, they have experienced high false alarm 
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rates. As such, at least one airline removes them upon receipt of new 
engines. The sensor manufacturers insist that the current generation of 
sensors exhibit high reliability. Their claims seem to be substantiated by 
the number of airlines that do use the entire sensor package for sophisticated 
analyses such as trending. 

Military aircraft engines usually carry many of the same transducers 
as commercial engines. They serve both control and diagnostic purposes. 

In the area of ground-based test, visual inspections, borescope 
inspections, x-ray checks, eddy current checks, and oil analyses all find 
application. Some sophisticated instrumentation systems are employed to 
acquire data from engines in test cells. Temperatures, hot-gas flows and 
pressures, and other similar data are gathered for off-line analysis. 

Signal Processing . The signal processing employed for data from 
on-board sensors is centered around the enhancement of signal-to-noise ratios. 
Techniques such as low-pass, high-pass, and band-pass filtering are common 
place. Features are sometimes generated using straight-forward approaches 
such as integrating acceleration signals to derive velocity information. 
Ground-based instrumentation employs similar signal processing approaches. 

Diagnostic Techniques . The most common approach employed for 
on-board jet engine diagnostics relies on a table of limits. When a limit has 
been exceeded, the appropriate alarm is signaled and the response, if any, 
initiated. Recently, this approach has been extended or supplemented by some 
carriers who perform limited on-board trend analysis. Data gathered by 
on-board sensors are recorded at regular intervals (ranging from several 
seconds to several minutes). Trends are calculated in order to estimate when 
the measured parameters will exceed their "red lines". This estimate may be 
modified to allow for changes in the rate of degradation. Some air carriers 
are now relying on information from ground-based trend analyses to con- 
veniently schedule engine repair. 

One diagnostic technique used by both the military and the civilian 
air carriers merits discussion. This technique is referred to as "gas path 
analysis". Developed and popularized by Hamilton Standard, the approach 
involves the optimal estimation of the state, and subsequently the health, of 
jet engines, in practice, a mathematical model is developed which represents 
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a simulation of a particular engine. Sensor data are then used as a gauge for 
the optimal adjustment of the model parameters. When those parameters exceed 
acceptable limits, a failure is declared. 

At Kelly Air Force Base, the Air Force uses such a system for test 
cell analysis of engines. TWA has also recently purchased such a system from 
Hamilton Standard. In addition, TWA has initiated a program whereby sensor 
data is telemetered from their latest generation of aircraft, and a quasi- 
real-time analysis is performed to assess engine performance. The air 
carriers rely heavily on an integrated system where in-flight data is analyzed 
and used in conjunction with ground-based test results to plan maintenance 
actions. 

An on-going research and development effort is focused on the 
concept of an expert system (artificial intelligence based computer program) 
for jet engine diagnostics. This concept is based on the transfer of human 
expertise to the expert system computer program. Although these systems are 
maturing very rapidly, they are not yet considered to be off-the-shelf. 

Highlights . Items of particular interest which were obtained during 
the aircraft portion of the survey include: 

USAF Retirement for Cause. The USAF is in the process of imple- 
menting a maintenance policy referred to as "retirement for cause". In short, 
this policy requires that an experimental analysis be performed on each batch 
of engine components in order to accurately understand and predict the life 
limits in the presence of the potential failures. For example, the level of 
propagation that a crack in a turbine vane must attain before failing will be 
empirically determined. Once these life limits are known (or at least esti- 
mated), the engine monitoring systems and periodic inspections are used to 
track engine component failures. Only when the life limits are approached are 
the faulty components replaced. 

USAF On-Board Diagnostic System. An on-board engine monitoring 
system similar to the AIDS (see below) was experimentally implemented on five 
tactical F-15A aircraft (F100 Engines). The parameters monitored were: 
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• augmentor fuel pump discharge pressure 

• augmentor permission fuel pressure 

• burner pressure 

• fan/core mixing pressure 

• fan exit duct pressure 

• fuel pump boost pressure 

• fuel pump inlet pressure 

• fuel pump discharge pressure 

• main breather pressure 

• number four bearing scavenge 
pressure 


• rear compressor variable 
vane pressure 

• fuel pump inlet temperature 

• main oil temperature 

• compressor exit static 
temperature 

• fan exit duct temperature 

• diffuser case vibration 
t inlet case vibration 

• power level angle position. 


The on-board data acquisition system monitored these parameters and 
subsequently transferred the data for ground-based analysis. Such analyses, 
in conjunction with ground-based tests were used as the basis for a main- 
tenance program. On the whole, the experiment was considered to be 

successful . 


Experience with Commercial Carriers. Three domestic air carriers 
were interviewed in addition to making a review of literature describing some 
of the maintenance policies of European airlines. 

Nearly all carriers utilize a variation of the aircraft integrated 
data system (AIDS). This data system was specified by ARINC and has the 
following attributes: 

• diagnostic information is centralized 

• some data is available for in-flight analysis 

• data is recorded on a cassette tape for later ground-based 
analysis. 

A number of carriers have implemented engine monitoring systems 
which are also integrated with the AIDS. In these systems, important engine 
parameters are monitored in-flight such as gas pressures and temperatures, 
fuel flows, rotor velocities, lubricant temperatures, and vibrations. Engine 
condition reports are available during flight to the flight engineer for 
short-term trending analyses. Long-term trending is performed using the AIDS 
data tapes during ground-based analyses. 
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In addition to the engine monitoring systems, ground tests and 
inspections are used to identify failures and trends. Ground-based inspec- 
tions may include: 

• visual inspection • eddy current checks 

• borescope inspections • spectrograph ic oil analysis 

• x-ray checks • ferrographic oil analysis 

The general consensus in the European air carrier community is that 
such sophisticated diagnostic and maintenance programs are cost justified. 
The domestic air carriers are not quite so aggressive. TWA, however, has a 
maintenance and diagnostic program which is very much along the lines of the 
European carriers. United Air Lines on the other hand, seems to employ a more 
conservative, people intensive approach to maintenance and diagnostics. 

Gas Path Analysis. Hamilton Standard Division of United Technolo- 
gies has been marketing a computer software package called Gas Path Analysis. 
This software relies upon a linearized mathematical model of a specific jet 
engine to estimate the performance characteristics of the engine's constituent 
modules using measured input parameters such as temperatures, pressures, spool 
speeds, and fuel consumption. The program also estimates the performance of 
the various sensors that are used to acquire the data used in the analysis. 

The mathematics of gas path analysis is based on the premise that it 
is possible to linearize any thermodynamic cycle model by deriving matrices of 
influence coefficients which relate deviations in measured parameters and com- 
ponent performances to coefficients describing component faults for each of 
the engine's operating points. The equations solved are: 

A = H X + e 

Y = Ge Xe 


Xe 

where X = and H = (HeiHs) 

The significance of the various variables is as follows: 

• Z is a column vector of measurement deviations or deltas 

• Y is a column vector of performance deltas for the engines' con- 
stituent modules 
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• Xe is a column vector of engine fault deltas 

• Xs is a column vector of apparent sensor errors 

• He and Ge are the matrices of coefficients derived from the 
engines' mathematical model 

• Hs is a matrix of sensor fault coefficients 

• e is a random vector denoting sensor non-repeatability. 

The dimensions are such that there is an over-specified set of equa- 
tions which are a result of analytical redundancy in the measured parameters. 
It is also this fact which allows the determination of sensor errors as well 
as engine component malfunctions. 

A number of air carriers use this technique for ground-based 
analysis. Some European carriers and TWA use the gas path analysis program 
for analysis of flight data. Other carriers and the USAF use it only for test 
cell analysis of engine performance. 

Sensors and Instrumentation Development. The area of sensor devel- 
opment receiving the greatest amount of attention for flight applications is 
that of fiber optic sensors. These sensors are especially desirable from the 
standpoint of weight and noise immunity. At this stage of development, how- 
ever, the fiber optic connector technology is not sufficiently robust to allow 
widespread use on flight engines. A recent NASA study has examined applica- 
tions for fiber optic sensors such as: 

t rotary encoders 

• optical tachometers 

• rotor blade tip clearance 

• optical temperature sensors (pyrometers). 

Optical pyrometers have also been used in experiments to accurately 
determine turbine blade life. Solar Turbines Incorporated has provided such 
instrumentation for a number of these experiments. Optical clouding due to 
the presence of combustion products has been the principal operational draw- 
back of this type of instrumentation. 

In the more general area of data acquisition, a number of instru- 
mented engine core test programs have been carried out. An off-the-shelf sys- 
tem for telemetering data from an engine rotor is available from Acurex Cor- 
poration. These systems are not considered to be sufficiently robust for 
flight applications. 
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Expert Systems. There are at least two programs underway for the 
development of rule-based expert systems for jet engine diagnosis. On the 
military side, the Air Force has been funding such a development at General 
Electric. In the commercial sector, Boeing has also been developing an expert 
system for jet engine diagnosis. 

Non-Aerospace Industries 

Information sources for this part of the survey included interviews 
with experts in fields ranging from medical electronics to transportation sys- 
tems. In addition, interviews were conducted with Battelle experts and rele- 
vant publications were reviewed. 

In general, the industrial sector has been somewhat slow in recog- 
nizing the potential of machine diagnostics, but recently, there has been an 
increasing emphasis in this area. The motives for this interest are varied. 
For example, NRC regulations have had a strong influence on the nuclear power 
industry while customer support issues have had an impact on the use of diag- 
nostics in the automobile industry. Whatever the motives, some interesting 
techniques have resulted which may ultimately be of value to the SSME program. 

Data Acquisition . In the area of transducers, most industries have 
embraced the proven sensors, e.g., accelerometers, thermocouples, etc. The 
manufacturers of those devices have been developing more reliable and "rug- 
gedized" transducers and recognize that their sensors will be located in pro- 
gressively more hostile environments. 

In terms of sensing concepts, a number of techniques in development 
or use merit discussion. These concepts are described in the following 
paragraphs. 

In the nuclear power industry, a device known as a miniature 
accelerator or MINAC has been developed for radiographing pump housings. The 
device is placed inside the housing and photographic film is placed around the 
outside of the housing. Once activated, the MINAC generates radiation that 
penetrates the pump and exposes the film— from the inside-out. This device 
has simplified a difficult imaging problem. 
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For the conventional power industry. Solar Turbines Incorporated is 
under contract with the Electric Power Research Institute to instrument a gas 
power turbine with an optical pyrometer. The pyrometer is positioned to scan 
the passing turbine blades and provide measurements leading to accurate pre- 
dictions of the blades' life. 

A number of novel fiberoptic-based sensors have been under develop- 
ment. An example of this is the laser-doppler-velocimeter (LDV) which mea- 
sures the velocity, not speed, of moving material. The material being mea- 
sured can be a solid or a fluid. Because of its optical nature, the informa- 
tion can be communicated from the moving medium to the sensor by optical 
fibers. This sensor is already finding application in the manufacture of 
synthetic fibers. 

A new class of semiconductor devices for measuring the presence of 
various elements has been under development. This device is called an ion 
selective field effect transistor (ISFET). These devices have been proposed 
for measuring such parameters as hydrogen concentrations in gases, and glucose 
levels in human blood. ISFETs have certain stability problems that have not 
as yet been resolved. 

Cooperative sensing schemes are finding increased usage. The prin- 
cipal behind this concept is not new: the design of the system or component 
to be examined is altered so as to provide a clear, unmistakable signature 
which is easily monitored. Putting a tracer in a gas to measure concentra- 
tions and flows represents a well developed application of this technique. In 
a more recent example, bearing balls where magnetized to allow the monitoring 
of their behavior by simple magnetic field sensors. 

For the storage of performance data, the memory card, an extremely 
portable device, is gaining popularity. This device is comprised of a micro- 
computer and nonvolatile data memory in a very small package (typically the 
size of a credit card). Memory cards, because they are inexpensive and port- 
able, can permit the highly accurate tracking and monitoring of modules and 
components as they progress through the repair cycles. Unfortunately, the 
storage capacities of the data memory are still limited. 

Vibration monitoring is common in numerous industries ranging from 
petrochemical plants to paper mills. For example, at Exxon's petrochemical 
plant in Baytown, Texas much of the machinery is continuously monitored using 
a minicomputer and on-board accelerometers. The signal levels of the 
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accelerometers are analyzed to determine trends. Based upon such trends, 
maintenance can be optimally scheduled. In this same plant, such phenomena as 
pump cavitation were also detected by more careful analysis of the accelero- 
meter signals. However, the ability to gather this additional information has 
not been integrated into the monitoring system. 

Signal Processing . In the realm of signal processing, the most 
impressive developments have been in the area of hardware. Integrated cir- 
cuits are now available which perform such functions as real-time digital fil- 
tering or real-time Fast Fourier Transforms. A manufacturer of charge- 
coupled-device (CCD) arrays, EG&G Reticon, also manufacturers semiconductor 
devices which perform many of the filtering and analysis functions in the 
discrete time analog domain. Prior to the availability of those devices, 
these filtering techniques were only possible using digital electronics. 

In the continuous time domain, a number of sensors have been devel- 
oped for specific applications to perform filtering functions in a non- 
electronic fashion. One well developed example of this approach is the use of 
a tuned acoustic transducer for the monitoring of predetonation in GM automo- 
bile engines. This approach was used by GM in a effort to minimize production 
costs. 

In the field of automated inspection systems a good deal of progress 
has been made in image processing and image interpretation. Commercial sys- 
tems are now available for the automated inspection of pieces on an assembly 
line for manufacturing defects. Similar techniques have been developed for 
the autonomous inspection of printed circuit boards. This area will likely 
continue to evolve due to the recent successes. 

Recent research in the human factors associated with display tech- 
nology is directed toward the presentation of high level information, rather 
than machine parameters, in a graphical format. In industries such as nuclear 
power, the operators of the systems need diagnostic information in a high- 
level and unambiguous format, thus, permitting the decisions to be made 
quickly and accurately via human pattern recognition. 

Diagnostic Techniques . The approaches used in the industrial sector 
for making diagnostic decisions span the entire spectrum, from the simple 
table lookup technique employed on most automobiles, to expert system computer 
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programs for the diagnosis of failures in train locomotives. Of the informa- 
tion gathered during this part of the survey, there are several concepts worth 
mentioning. These make up the remainder of this section. 

General Electric Corporation has developed an expert system (com- 
puter program) for the diagnosis of failures on railroad locomotives. In this 
approach, the computer program was written to reason and draw conclusions 
based upon a set of rules. The set of rules is derived from interviews with 
human experts in the area (that of repairing GE's locomotives). In operation, 
the expert system guides the actions of a repair technician. This is only one 
of several diagnostic "experts" that have been developed: Westinghouse's 
Steam Turbines Division has developed a diagnostic expert system for steam 
turbines. The Westinghouse program, moreover, identifies sensor malfunctions 
as well as turbine component failures. 

On-going research in the area of non-linear diagnostic filters pro- 
mises to improve their performance by increasing sensitivity and reducing 
false alarm rates. In one particular effort involving Case Western Reserve 
University and Bailey Controls Division of Babcock and Wilcox, an industrial 
heat exchanger will be the test bed for an improved non-linear diagnostic 
filter. The benefits of such research efforts are likely to be incremental in 
nature, but available in the relatively short term. 

The commercial application of pattern recognition based upon statis- 
tically derived and/or empirically determined features has been a reality for 
a number of years. The benefits of this approach is that the computation 
times for making decisions about a machine's performance can be very brief. 
Other computationally oriented techniques, non-linear diagnostic filters and 
expert systems, typically require substantially more time than pattern recog- 
nition. Historically, most pattern recognition systems have been custom 
tailored to the signatures of single specific machines, rather than, for 
example, other identical machines. This shortcoming has been addressed 
through the use of adaptive pattern recognition systems. 

Vibration trend analysis is becoming a commonly used technique, 
especially in industries such as petrochemicals and paper manufacturing. This 
technique usually involves the monitoring of vibration sensors (most often the 
integrated outputs of accelerometers) to watch for change. The rate of 
increase is estimated, and repairs scheduled according to the estimated time 
until a failure occurs. 
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Predictive diagnostics based upon ferrographic analysis of lubricant 
has been a reality for a number of years. This technique is based upon the 
gathering and analysis of wear particles to determine the mechanisms and 
severity of wear. While there are machine mounted sensors available for auto- 
mated ferrographic analysis, the most thorough analyses are performed off-line 
using bichromatic microscopy. 

Voting systems have been used to address anticipated failures (i.e., 
those failures that result from known component failure modes). However, 
unanticipated faults due to such causes as design errors cannot be addressed 
by voting systems. The more complex a machine, the greater is the likelihood 
of latent design errors. 

Recommendations 

Given the nature of the SSME environment and maintenance structure, 
several of the approaches and techniques identified in the previous section 
are recommended. We will hold to the same organization that has been used 
throughout this report. These recommendations are further summarized in 
Table 3. 

Data Acquisition 

To the extent possible, those existing on-board sensors which have 
experienced reliability problems, should be considered for replacement. As 
existing sensors are continually improved for sensitivity and durability, they 
should be examined and, as warranted, tested and considered for use on the 
SSME. A sensor data base would be beneficial for both the SSME, and for 
future rocket engine development programs. 

The on-board sensors should be more effectively used. For example, 
the accelerometers currently on the SSME are only used for the RMS values of 
their outputs. There is undoubtedly a great deal of information available in 
the higher frequency harmonics that is not being used. The full bandwidth of 
all existing sensors should be recorded onboard and the data later used for 
detailed ground-based analysis. It also may be possible to telemeter this 
recorded data while the STS is on orbit. 
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TABLE 3. SUMMARY OF DIAGNOSTICS RECOMMENDATIONS 


Diagnostics 

Recommendations 

Category 

On-Board 

Ground-Based 

Data Acquistion 

More Reliable Sensors 

Increased Bandwidth 
for Existing Acceler- 
ometers and Trans- 
ducers (pressure, 
temperature, flow, 
and speed) 

Continued Development 
of Isotope Wear Detector 

Extension of Isotope 
Wear Detector Concept 
to Include Ferro- 
graphic Analysis 


Additional Conventional 
Sensors 

Extensive Data 
Recording 

Use of Tracer Elements 
(Tritium or Sulfur 
Hexafluoride) for 
Leak Detection 


Continued Development 
of: 

Optical Pyrometer 
Fiber Optic Deflecto- 
meter 

Ultrasonic Doppler 
Transducer 
Ultrasonic Flow 
Meter 


Signal Processing 

Improve S/N Ratios 
by Spectral Filtering 
and Noise Cancellation 

Image Processing 
to Enhance 

Borescope Inspections 

Diagnostic 

Techniques 

Analysis and Development 
of Pattern Recognition 
Diagnostic System 

Develop Gas Path 
Analysis Model of SSME 

Evolve Gas Path Analysis 
Model to Include Non- 
Linear Diagnostic Filter 



Establish and Maintain 
Integrated SSME Data 
Base (diagnostic and 
maintenance) 
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It is estimated that upwards of 85 percent of all failures are 
intermittent in nature. Over the course of our survey, two approaches to the 
isolation of intermittent failures were identified: marginal testing and 
extensive logging. The use of marginal testing techniques on the SSME is not 
feasible. Therefore, we recommend that extensive on-board recording of the 
engine be performed. By analyzing this extensive amount of data, either on 
the ground or on-board, intermittent problems may be identified and isolated. 
In addition, the extra sensors required for such monitoring will augment the 
analytical redundancy of the diagnostic system. 

The sensors proposed by Rocketdyne for the monitoring of turbo- 
machinery should be carried through to application. Specifically, the optical 
pyrometer, fiberoptic def lectometer, and isotope wear detectors, will signi- 
ficantly improve the information available on the health of the turbopumps. 
In addition, the isotope wear detector program should be extended to encompass 
ferrographic analysis. Numerous precedents suggest that this type of analysis 
would be valuable for predictive diagnosis. 

For ground-based inspections, we recommend that tracing elements 
should be considered to aid in the detection of hydrogen and other fluid 
leaks. It is felt that this would result in the simplified sensing apparatus. 

Signal Processing 

For ground-based tests, image processing should be used to augment 
certain inspection processes, especially the borescope inspections. It is 
believed that such techniques could both improve the accuracy, and reduce the 
time required for inspections. 

For on-board instrumentation, more elaborate signal processing will 
be required. Given the noise environment of the SSME, both spectral filtering 
and statistical noise cancellation techniques could be used to provide 
improved signal-to-noise ratios. High signal-to-noise ratios are essential if 
the existing sensors are to be more fully utilized. 

Diagnostic Techniques 


In the arena of diagnostic techniques there are three recommenda- 
tions, one for on-board diagnosis and two for ground-based analysis. The 
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principal purpose of the on-board diagnostics is to avert rapidly developing, 
catastrophic failures. Because of the speed of diagnosis and level of 
accuracy required, pattern recognition is the only realistic technique. To 
increase the coverage and accuracy of the on-board diagnostic system, a 
pattern recognition-based diagnostics should be considered. 

For ground-based analyses, an effort to improve the analytical model 
for the SSME should be undertaken. In conjunction with such a model, a non- 
linear diagnostic filter should be developed. This effort might begin by 
initiating a gas path analysis program, and improving the analysis on an 
incremental basis. It may even be possible to run such a program in real-time 
based upon telemetered data (given adequate computing resources). If the 
system is sufficiently accurate, detailed trend analysis capabilities could 
result. 

Finally, a thorough and highly integrated data base should be estab- 
lished to track and correlate information about engines and components. 
Information from on-board sensors, ground-based inspections, repair actions, 
and component histories should be included. Analysis of this data base must 
be made highly interactive to be most effective. Ultimately, such a data base 
could benefit the SSME maintenance staff, the operations staff, and the engine 
component manufacturers. 
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SSME DIAGNOSTIC EVALUATION 


The third task of the SSME study is intended to assimilate the out- 
puts of the SSME failure data review and the diagnostics survey and to use 
this information for evaluating the current SSME diagnostic system. The 
principal objective of this task is to identify potential means for improving 
the availability of high-quality, pertinent engine data. This information 
will be used both in-flight and on the ground to assess the condition of the 
SSME and its respective components. To accomplish this objective, an analysis 
tool has been selected to perform a systematic examination of the diagnostic 
information in the SSME. This tool (Failure Information Propagation Model) 
and its initial application to an SSME component is described in this section. 

Issues and Approach 

To evaluate the overall SSME diagnostic system, the information 
gathered during the failure data review and diagnostic survey must be Inte- 
grated and analyzed. At the outset of this evaluation task, the following 

data were available: 

• Results of the SSME failure data review 

• Knowledge of the existing SSME inspection and maintenance process 

• Knowledge of the current SSME sensors 

• Information on sensor research and development underway for the 
SSME 

• Results of the diagnostic survey. 

This information was believed to provide a solid foundation for performing the 
required evaluation. 

The first step in the analysis was to select the actual tool or 
technique to be used. To facilitate selection of a suitable analysis method, 
an overall approach was defined for the task. The approach adopted centered 
on addressing several key diagnostic issues. These Issues included the 
following: 

• What additional diagnostic information is available to the 
existing SSME sensors? 
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• Are there any information rich test points on the SSME that 
should be instrumented? If so, which sensors should be 
considered? 

• How can we optimize the placement of additional sensors so as to 
minimize their total number and cost while maximizing their 
information gathering potential and reliability? 

« wliiiJi inilr-umentation researcn and development areas represent 
the best investment relative to the diagnostic needs of the SSME? 

The common denominator for all of the issues mentioned above is an under- 
standing and characterization of the engine failure information and its flow 
paths. 

The major focus of the initial effort on this task was directed, 
therefore, at finding a suitable means to represent the SSME failure informa- 
tion and at developing a data format which could be easily manipulated to 
address each of the above issues. The tool which appeared to satisfy all of 
the proposed requirements was the Failure Information Propagation Model 
(FIPM) . The FIPM concept is discussed in the following subsection. 

Failure Information Propagation Model 

The Failure Information Propagation Model (FIPM) is a technique 
developed by the Battelle Columbus Division to qualitatively evaluate the 
potential test points in a system. The objective of this qualitative evalua- 
tion is to assess the information bearing value of each test point. The FIPM 
basically divides the system under analysis into its principal components or 
functions, describes the failure modes for these components, catalogs the 
physical connections between the components, details the flow of failure 
information through the various connections and groups the failure informa- 
tion according to signalproperties. It must be emphasized at this point that 
the FIPM models the propagation of failure information and not the failure 
itself. The model assumes that the system being depicted is in a near-normal 
state of operation. The failure information flow is described for the Instant 
of time immediately following a given failure. 

The FIPM was initially developed to evaluate the factors affecting 
copy quality in a photographic copy machine. This proprietary study was 
performed for an industrial client. Due to the nature of the system involved, 
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this analysis was primarily concerned with the electronic functions of the 
device. Subsequent to this study, the FIPM was applied to an ion chamber and 
a home furnace. All of this work preceded the FIPM's consideration for this 
task. As a result of this early work, the FIPM has demonstrated the capa- 
bility to adapt to a broad range of mechanical and electronic systems. 

Three principal applications exist for the output of this model. 
These applications are: 

• Design of sensor systems for new devices or components 

• Evaluation of existing sensor systems to maximize the information 
yield 

• Identification of sensor research and development needs to target 
key diagnostic data. 

These important features of the FIPM made it especially attractive for use in 
the SSME diagnostic evaluation. 


FIPM Example 

The formulation of an FIPM must begin with the identification of the 
modules (components or functions) that comprise the system being evaluated. 
These modules may be piece parts, subassemblies, or subsystems depending on 
the level of detail sought. In the case of a typical exhaust fan, which is 
used here solely as an example, the constituent modules are subassemblies 
which have been selected to illustrate a top-level FIPM. In the case of the 
high-pressure oxidizer turbopump (HPOTP) FIPM which will be discussed later in 
this section, the constituent modules generally are piece parts. 

The modules selected to Illustrate the FIPM concept for the exhaust 
fan are the AC motor, the fan belt, the fan, the fan bearing, and the frame 
which supports these components. These elements are shown in Figure 14. The 
resulting model is very simple in that the AC motor actually has both elec- 
trical and mechanical parts, the fan has both blades and a pulley for the 
drive belt, etc. It is recognized that this model ignores many factors which 
would be considered in a thorough engineering analysis. 

The network of connections between the exhaust fan modules is 
depicted in Figure 15. As indicated in this figure, the motor is mechanically 
mounted to the frame and transforms electrical power into mechanical power 



70 


AC Electric 
Motor 

1 




Frame 


Bearing 

5 


4 


FIGURE 14. MODULES COMPRISING EXHAUST FAN FIPM 



■ ■ ■ Electrical Power 

Friction 

Air Flow 

“'WIT- Rolling Element 

Mechanical 

Thermal 


Fan Belt 


Fan 

2 


3 




Frame 

5 


Bearing 

4 


FIGURE 15. CONNECTIONS BETWEEN EXHAUST FAN MODULES 









71 


through friction with the fan belt. The fan belt also is connected by fric- 
tion to the fan. The fan and frame are joined through the bearing by means of 
rolling elements. A thermal connection also exists, in normal operation, 
between the AC motor and the frame. The final element in the network Is an 
air flow path out of the fan. 

The failure modes of each of the exhaust fan modules is shown In 
Figure 16. It should be noted that these failure modes do not Include 
mechanisms which are external to the module. Failures due to such outside 
causes as fire, explosion, or mechanical damage are not considered. Events 
such as fire in the fan motor also are not considered since these are actually 
effects of more fundamental failure modes. It should be reiterated that the 
FIRM is modeling the situation immediately following a failure and not the 
longer-term effects and consequences of that failure. 

The occurrence of any exhaust fan failure mode produces failure 
information which can be detected externally to the component and which will, 
in general, be transmitted to adjacent components. An assessment of the 
failure information propagations for the exhaust fan example is shown in 
Figure 17. It is interesting to note that, in this example, all of the 
failure modes transmit failure information to all of the other modules. The 
large amount of failure data which is available at any given connection in the 
system is evident in this figure. 

The failure information in the current example can be further cate- 
gorized at each connection according to the type of measurement or sensor 
required for detection. An open winding [ 1C 1 or breakage of the fan belt [2B] 
could be detected by an ammeter on the electrical line. Similarly, binding of 
the motor (1AJ, a shorted winding [ID], or dirt on the fan [3B] can be 
detected by a voltmeter across the motor terminals. In Figure 18, the failure 
information for each connection has been grouped according to the type of 
measurement involved. This clustering of the failure Information is the final 
step in the development of the FIPM. Analysis of the data in the model can 
now be initiated. 

A sensor of the appropriate type would detect any or all of the 
failure modes within a particular group. It would be necessary, therefore, to 
provide additional information or to further process the signal to uniquely 
identify any single failure mode. The process of determining the failure 
signatures and respective sensor sets is highly detailed and has not been 
undertaken for the exhaust fan example. 
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FIGURE 18. FAILURE INFORMATION GROUPED BY SIGNAL TYPE 
FOR THE EXHAUST FAN FIPM 


High-Pressure Oxidizer Turbopump FIPM 

The high-pressure oxidizer turbopump (HPOTP) was selected as the 
initial SSME component for evaluation using the FIPM. An HPOTP FIPM was 
graphically constructed using the steps outlined in the preceding example. 
The resulting model was quite large due to the complex nature of the HPOTP. A 
large portion of the initial representation also was color coded for ease of 
interpretation. Due to both of these factors, the initial HPOTP FIPM is 
unsuitable for inclusion in this report. An attempt will, however, be made to 
describe the significant features of this model and the subsequent analysis 
which was performed. The version of the FIPM which will be described in this 
section is no longer the baseline configuration for the HPOTP. The reasons 
for this situation will be discussed. The revised FIPM approach which is 
currently being used is outlined in a subsequent subsection. 
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The original HPOTP F I PM had the following features: 

• 46 modules 

• 100 module failure modes 

• 59 connections 

• 2248 failure information propagations. 

A small black and white excerpt of this FIPM is shown in Figure 19. A key for 
this graphic is included as Figure 20. All of the data comprising the FIPM 
was displayed on the graphic representation. 

Subsequent to the development of the HPOTP FIPM, a preliminary 
analysis of the HPOTP failure information was performed using a failure infor- 
mation matrix. A portion of this matrix is shown in Figure 21. In this 

matrix, the rows represent connections (test points) between modules. The 
columns correspond to specific module failure modes. The data entered in the 
matrix at the intersection of a given row and column is the failure 
information types associated with the designated failure mode which can be 
detected at the designated connection. This matrix was used to develop a 
preliminary set of test signature equations for the HPOTP. 



FIGURE 19. EXCERPT FROM INITIAL HPOTP FIPM 
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FAILURE SIGNAL TYPES 
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FIGURE 20. KEY FOR INITIAL HPTOP FIPM 


The test signatures were formulated by marching through the columns 
of the matrix. For each column, the rows were examined to determine where 
failure information resided. The rows also were scanned to identify other 
failure data present at the connection which exhibited the same signal 
characteristics (i.e., high temperature, low pressure, etc.). By careful 
evaluation of the matrix, it was possible to determine sets of signals which 
could be used to uniquely identify specific failures. Some examples of the 
initial results included: 

• Failure mode IB = rpm associated vibration @ test point 34 OR 

= rpm associated vibration @ test point 36 OR 

= rpm associated vibration @ test point 38 

• Failure mode 2A = cavitation @ test point 5 AND NOT 

cavitation Q test point 1 
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• Failure mode 2B OR 

• Failure mode 3A OR 

• Failure mode 5c = rubbing @ test point 4. 

No attempt was made to determine a unique signature for certain classes of 
failure modes. In cases such as the turbopump bearings, it is not necessary 
to know which particular bearing is bad. An indication that any of the four 
bearings is experiencing degradation is sufficient cause to remove the turbo- 
pump from the engine and overhaul the bearings. 

Subsequent efforts to specify a set of diagnostic sensors which 
would target all of the high-priority HPOTP failure modes, as identified in 
the SSME failure data review, encountered difficulty due to the need for addi- 
tional data. The model, as constructed, did not have sufficient detail to 
adequately describe the failure signals. It was determined that specifying 
high temperature was insufficient without some sort of associated range. This 
initial application of the FIPM methodology to a complex mechanical system had 
also demonstrated the need for more formal definitions and standardized 
development rules. The definitions and development rules had previously been 
instituted on an ad hoc basis as the need arose. A decision was reached to 
restructure the HPOTP FIPM based on a more formal development methodology. 

Revised FIPM Methodology 

The revised FIPM methodology was prepared by the originator of the 
FIPM concept with major inputs provided by the participants in the initial 
FIPM activity. A number of definitions and rules resulted from this process 
which will be documented at a later date. The definitions, in general, con- 
cerned the types of physical connections, failure modes, signals, and signal 
parameters which can be used in constructing the FIPM. These definitions have 
been made with respect to fundamental physical properties and laws. Their 
intent Is to reduce the number of arbitrary and possibly confusing choices 
which must be made during model formulation. The rules relate to the handling 
of certain situations which otherwise might be ambiguous. 

It was also decided that the new FIPM procedure should be imple- 
mented in a data base format. This step was necessary to accommodate the 
large amounts of information which were projected for the SSME models. After 
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consultation with the technical staff at both NASA Headquarters and NASA MSFC, 
Digital Equipment Corporation's Datatrieve data base management system was 
selected for use in this application. This system was chosen in large part 
because of its availability at NASA MSFC and the substantial base of experi- 
ence which existed at both Battel le and at MSFC. 

The revised FIPM methodology still uses a graphical representation 
of the system. However, the failure information propagations are no longer 
shown on this diagram. The graphical representation includes only the 
modules, module failure modes, and the connections between the modules. All 
of this data is used extensively during the propagation of the failure infor- 
mation throughout the system. The information displayed on the FIPM diagram 
is also stored in the data base along with the failure information propa- 
gations. The data base also allows additional descriptive data to be stored 
concerning the modules, module failure modes, and connections between the 
modules. Incorporation of this data would have been impossible with the 
original graphic model. 


FIPM Status 


The revised FIPM methodology has been completed. It is recognized, 
however, that any procedure such as the FIPM must always undergo some expan- 
sion and modification. The development methodology does allow for flexibility 
but such changes should be made only after careful consideration of all the 
consequences. The methodology will be documented in the final report covering 
the on-going phase of this study. 

The software associated with the FIPM data base is currently under 
development. This software will be documented at the time of delivery to NASA 
MSFC. MSFC will be provided with a magnetic tape containing all of the input, 
modification, and listing procedures developed. All SSME FIPM data generated 
during the conduct of this study also will be transferred to MSFC. 

The revised HPOTP FIPM presently is being formulated in parallel 
with the development of the FIPM data base software. The completed HPOTP FIPM 
will be documented in a separate technical report. This report will include 
the FIPM graphic representation and listings of all the HPOTP information 
stored in the data base. 
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The process of implementing the data base and producing the HPOTP 
FIPM is a highly interactive situation. The data definitions associated with 
the various data files affect the information which must be generated for the 
HPOTP. Likewise, situations or problems encountered during the loading of the 
HPOTP data can affect the design and implementation of the FIPM data base. 
The completion of the HPOTP FIPM should resolve the majority of these issues 
and interactions. 
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ON-GOING RESEARCH 

A number of activities are currently in progress or planned in 
connection with this study. The tasks which presently are being worked 
include: 

• Development of F I PM data base software (previously discussed) 

• Generation and loading of FIPM data for the HPOTP (previously 
discussed). 

The efforts which are currently planned include: 

• Generation and loading of FIPM data for the following SSME 
components: 

- high-pressure fuel turbopump (HPFTP) 

- low-pressure oxidizer turbopump (LPOTP) 

- low-pressure fuel turbopump (LPFTP) 

- oxidizer preburner (OPB) 

- fuel preburner (FPB) 

- main combustion chamber (MCC) 

- heat exchanger (HE) 

- main injector 

- nozzle 

• Assessment of candidate diagnostics 

• Analysis of existing engine data 

• Examination of on-board implications of SSME diagnostics 

• Recommendations for diagnostic system development. 
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DATA SOURCES 


Information for the diagnostic survey was obtained through numerous 
contacts in government and industry. The following is a listing of many of 
the government and industry sources used. 


Liquid-Fueled Rocket Engine Diagnostics 


• Aerojet 

0 Battelle Columbus Division 

• Bentley Nevada 

• Honeywell 

• NASA LeRC 


• NASA MSFC 

• Perkins Elmer 

0 Pratt and Whitney 

• Rocketdyne 


Aircraft Diagnostics 


t Battelle Columbus Division 

• Battelle Geneva Division 

• Boeing 

• Eastern Airlines 

• General Electric 

• Hamilton Standard 

• Pratt and Whitney 

• Rolls Royce 


• Solar Turbines Incorporated 

• Trans World Airlines 

• United Airlines 

• USAF Griffiss Air Force Base 

• USAF Kelly Air Force Base 

• USAF Wright-Patterson AFB 

• Vibrameter 


Non-Aerospace Diagnostics 


• ATE Management and Service Company 

• Battelle Columbus Division 

• Battelle Geneva Division 

• Bently Nevada 

• Case Western Reserve University 

• Department of Defense 

• Detroit Diesel Allison 

• IRD Mechanalysis 

• Marsh-McBirney 

• The Ohio State University 


• Scientific Atlanta 
0 Sensor Developments 
Incorporated 
0 Solar Turbines 
Incorporated 
0 StrainSert 
0 Universal Engineering 
0 United States Army MICOM 
0 Vibrameter 
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APPENDIX A 
UCR REVIEW 

Preliminary Distribution of UCRs by Component 



A-l 


UCR DATA REDUCTION 


Component 

Description 

Total 
No. of 


CRITICALITY 


UCR'S 

i 

2 

3 

N* 

AlOO 

Hot Gas Manifold 

80 

2 


77 

1 

A150 

Heat Exchanger 

18 

4 


12 

2 

A200 

Main Injector 

175 

5 

3 

162 

5 

A330 

Main Combustion Chamber 

105 

1 

3 

98 

3 

A340 

Nozzle 

296 


2 

285 

9 

A600 

Fuel Preburner 

171 


2 

165 

4 

A700 

Oxidizer Preburner 

13 



13 


B200 

High Pressure Fuel Turbopump 

457 

3 

11 

429 

14 

B400 

High Pressure Oxidizer Turbopump 

331 

7 

11 

302 

11 

B600 

Low Pressure Fuel Turbopump 

59 


3 

49 

7 

B800 

Low Pressure Oxidizer Turbopump 

92 



89 

3 

ClOO 

Check Valves 

11 



10 

1 

C200 

Pneumatic Control Assembly 

7 



7 


C210 

C250 

C270 

C300 

Solenoid Valves, Pressure Activated Valves, 
Pneumatic Filter, and Helium Precharge 
Valve 

11 



11 


DllO 

Main Fuel Valve 

15 



14 

1 

D120 

Main Oxidizer Valve 

14 



13 

1 

D130 

Fuel Preburner Oxidizer Valve 

12 



11 

1 

D140 

Oxidizer Preburner Oxidizer Valve 

28 



27 

1 

0150 

Chamber Coolant Valve 

9 



9 


0200 

Bleed Valves 

4 



4 


0300 

Antiflood Valve 

18 

2 

1 

15 



*No criticality. 


A-2 


UCR DATA REDUCTION (CONTINUED) 


Component 


Total 
No. of 

CRITICALITY 


Description 

UCR'S 

1 2 

3 

N 

D500 

GOX Control Valve 

8 


8 


D600 

Recirculation Isolation Valve 

9 


9 


EOOl 

Main Valve Actuator 

23 

1 

22 


E002 

Preburner Valve Actuator 

20 


19 

1 

E 1 10 

Main Fuel Valve Actuator 

35 

1 

33 

1 

E120 

Fuel Preburner Oxidizer Valve Actuator 

8 


8 


E130 

Oxidizer Preburner Oxidizer Valve Actuator 

9 

1 

8 


E140 

Main Oxidizer Valve Actuator 

5 


5 


El 50 

Chamber Coolant Valve Actuator 

25 

1 2 

22 


E201 

RVDT 

3 


3 


E202 

Servovalve 

0 




E203 

Torque Mctor/Servo 

0 




FOOO 

Control ler 

265 

167 

98 


F500 

Software (Not Reviewed) 

0 




F600 

GSE, Controller 

3 

1 

2 


F700 

CADS Software (Not Reviewed) 

0 




F800 

FASCOS 

29 

10 

17 

2 

GOOO 

Igniter 

76 


62 

14 

HOOO 

H001 

H002 

Electrical Harnesses 

105 

15 

77 

13 

J200 

Pressure Sensor 

84 

4 

70 

10 

J300 

Temperature Sensor 

113 

15 

96 

2 


A-3 


UCR DATA REDUCTION (CONTINUED) 


Component 


Total 
No. of 

CRITICALITY 


Description 

UCR'S 

1 2 

3 

N 

J600 

Flow/Speed Pickup 

13 

2 

10 

1 

J700 

Fuel Flowmeter 

0 




J800 

Accelerometers 

7 


5 

2 

KlOO 

Fuel Line/Duct 

81 

1 

79 

1 

K200 

Oxidizer Line/Duct 

32 

1 

31 


K300 

Drain Line 

5 


5 


K400 

Hydraulic Line 

3 


3 


K500 

Pneumatic Hose/Line 

9 


8 

1 

K600 

Controller Cooling Duct 

5 


5 


LOOO 

Static Seal 

18 


18 


L200 

Stretch Bolts 

7 


7 


L300 

Leakage (Joint) 

4 


4 


MOOO 

Gimbal 

9 


9 


NlOO 

Interconnect Hardware 

3 


3 


N200 

Thermal Protection 

5 


5 


N300 

Engine Vehicle Interface 

0 




N400 

POGO Accumulator 

3 


3 


N600 

AS I , Lee Jet Orifices 

6 


6 


N700 

Line Orifices 

0 




QOOO 

GSE (Not Reviewed) 

0 




Q500 

Closures 

0 





A-4 
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APPENDIX B 
UCR REVIEW 

Preliminary Listing of Failure Types by Component 


B-l 


A100 HOT-GAS MANIFOLD 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

T 

Criticality 
2 3 N* 

1 

Cracks in Liner 





(a) Thermal & Vibration Loads — Redesigned 

18 


18 


(b) Not Heat Treated--Heat Treat 

1 

1 


2 

Weld Cracks — Defective Weld--Fab. Modified 

16 


16 

3 

Contamination 





(a) Metal Fabrication Chips— None 

8 


8 


(b) Adhesi ve--None 

1 


1 


(c) Fluid, Internal--None 

2 


1 1 

4 

G-5 Seal Joint — Gouge, Leak-Planning Change 

7 


7 

5 

Flange Corrosion— None 

1 


1 

6 

Stud Keys Broken— Vibration or Tolerances — 





Plate Keys to Fit 

9 


9 

7 

ASI Chamber Cracks— Thermal Fatigue— None 

1 


1 

8 

Studs 





(a) Loose-lntal lation— Train Tech 

2 


2 


tD) uimension-repeatea itretcn-Kepair 

£ 


£ 


(c) Soft Keys— Design Change 

3 


3 

9 

Dimension Discrepancy 





(a) Powerhead Dimension Discrepancy— Open 

1 


1 


(b) Igniter Threads— Open 

1 


1 


(c) Plug (0.005 Out of Toler.) — Fabrication — 





None, Rework 

1 


1 

10 

Leak in MCC Ignition Joint— Open 

1 

1 


11 

Bent Flange (FPB) Install— None 

1 


1 

12 

Flange Nuts Galled— Stud Ref. Error— None 

1 


1 

13 

Spacer Gap— Vibration & Installation— None 

1 


1 

14 

Elliptical Plug Plating Missing— Unknown— None 

1 


1 

15 

SML Cracks— Not Config. for FPL 

1 


1 1 



80 

1 

” 77 “I 


♦No criticality. 


B-2 


A150 HEAT EXCHANGER 


Fail. Failure Mode - Failure Cause - 

ID Recurrence Control 


1 Coil Dings 

(a) Bracket Clearance--Redesign 

(b) Tech Mishandling — Mfg. Change 

2 Coil Crack-Fitting Material Incorrect- 
National Change 

3 Coil Leak-Wear— None 

4 Coil Clearances— Mfg. --Mfg. Changes 

5 Coil-Bent Tubes, Clearance Problems— 
Planning Change 

6 Coil Leak-Weld Incomplete— Inspection 

7 Bypass Line — Damaged When Removed— None 

8 Forward Vane— Inclusion— Open 


Total Criticality 

No. 1 2 3 N 


1 

2 



2 2 

1 1 

6 

3 

1 1 

1 

_L 

18 4 


5 1 

3 

1 

_1 _2 
12 2 



B-3 


A200 MAIN INJECTOR 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Heat Shield Retainers 





(a) Damage--New Heavy Design 

8 


8 


(b) Secondary Failure 

4 


4 


(c) Gas Turbulence — FPL — Change 

19 


19 


(d) Open 

3 


3 

2 

Baffles— Cracks, Erosion (Replace as Needed) 

20 


20 

3 

Lox Posts—Broken, Cracked 





(a) Broken-Gas Turbulence FPL — Change 





Structure 

2 


2 


(b) Thermal Overload— None 

1 


1 


(c) Open 

3 


3 

16 

Lox Post— Erosion 





(a) Blocked Orifice — Repair 

3 


3 


(b) High Cycle Fatigue— Material Change 

1 

1 



(c) Braze Joint— Leak— Spec Change 

1 


1 

15 

Lox Posts— Crooked, Bent — Inspect 

3 


1 2 

26 

Lox Posts— Plugged 

1 


1 

25 

Braze Joints— Leaks, Cracks — Inspect 

3 


3 

9 

Buff les— Loose Improper Installation— None 

2 


2 

5 

Heat Shield— Cracks, Thermal— New Retainers 

1 


1 

18 

Heat Shield— Cracks @ FPL— Unshaped Structure 

3 


3 

20 

Lox Post Inertia Weld-Spalling (FPL)— None 

1 


1 

7 

Primary Face Plate 





(a) Erosion— High Cycle Fatigue— Mat' 1 Change 

3 

2 

1 


(b) Cracks— Load Distribution— Inspection 

3 


3 

14 

Interpropellant Plate 





(a) Cracks— Heat Shield Failure— Better 





Retainers 

3 


3 


(b) Cracks— Gas Turbulence FPL— U-Structure 





Instal led 

3 


3 


(c) Cracks— Open 

1 


1 

21 

Secondary Face Plates— Chaffed— Improper Assy. 

2 


2 


c - 


A200 MAIN INJECTOR (CONTINUED) 


Failure Mode - Failure Cause - 
Recurrence Control 


Total Critical its 

No. 1 2 3 


Secondary Face Plate Retainers 

(a) Cracked--Insuff icient @ FPL--Redesign 

(b) Cracked — Plugged Post 

(c) Not Flush— No Problem 

Face Nuts (Erosion) 

(a) Local Over Heating— Maintenance 

(b) Secondary— Hot Gas Containment— Redesign 

(c) Mismachined Orif ice— Plugged Post-Repair 

Blocked Fuel Inlet— None 

ASI Supply Line-Cracks, Liquid Embrittlement- 
Redesign 

Reinforcement Ring Damage 

(a) Torn-Improper Assy. — Planning Change 

(b) Damage— Secondary Fai lure— None 

(c) Damage-Gas Turb. @ FPL— U-Structure 
Design 

T-Bolts 

(a) Loose-Improper Assy. --Design Change 

(b) Loose— Operation-Maintenance 

Strain Gauges— Inoperative— None 

Contami nants— Metal From Other Failures — None 

Broken Fuel Fi Iters— Insuff icient Life — 
Eliminate 


_ _25 
3 162 



B-5 


A300 MAIN COMBUSTION CHAMBER 



1 Burst Diaphragm 

(a) Leak-Rupture, Rise in Temp— UCR A010713 

(b) Leak, Weld— Redesign Weld 

(c) Leak, Improper Plug Install— Planning 
Change 


2 Irregular Hot Gas Wall 

(a) Bulges— Ok— Coolant Holes Enlarged 15 15 

(b) Blanched, Discolored— None— Normal 16 16 

(c) Hot Spots, Coolant Flow Restriction — None 2 2 

(d) Erosion by Contamination— None 2 2 

3 Hot Gas Wall Liner 

(a) Cracks— Restricted Cooling Channels— 

Enlarge Channels 5 5 

(b) Cracks— Normal— None 8 8 

(c) Crack in Cavity, Crown Weld— Machine 1 1 

(d) Centerline Crack, Hot Gas Impingement- 

Under Study 3 3 

7 MCC Coolant Channels— Cracks 

(a) Delamination — Repair as Needed 1 1 

fbl Inherent Cranks — Nnnp nr flnpn R q 

15 MCC Liner— Delamination EDCU Plating— None 3 3 

17 Port — Plugged, Brazing Alloy Contamination — 

Machining 2 2 

18 Port — Damage, Poor Reliability— Modify Engine 1 1 

10 Coolant Inlet— Missized— Open 1 1 

12 Turb. Drive Support Manifold— Leak by Weld 

Repair— Discontinue 1 1 


9 Welds 

(a) Hole Near Exit Manifold-Welding Improved 1 

(b) Microcracks— None, Normal 3 

(c) Surface Cracks— Planning Change 1 

(d) Coolant Inlet Welds Mismatch— Open 4 


1 

1 

4 



11 


Elbow— Cracks, Internal, Radiograph Oversight— 
Improve 


1 


1 



B-6 


A300 MAIN COMBUSTION CHAMBER (CONTINUED) 


Fail* Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 2 3 N 


14 


Acoustic Cavity— Erosion, Hot Gas Impingement— 
UCRA015766 2 


2 


16 Lee Jet— Tolerance — Planning Change 3 

8 Strut Assy. 

(a) Lugs Cracked, Weld— Change Weld 1 

(b) Clevis Worn— Open 1 


3 

1 

1 


19 Retainer Ring— Installed Wrong— Modify Engine 1 

6 Contamination 

(a) Fabrication Contaminant— Alert Personnel 2 

(b) From Outside Engine— None 1 

(c) Internal, Unknown— Ongoing Program 4 


105 


1 



1 

I 

9 


B-7 


A340 NOZZLE 


Fail* Failure Mode - Failure Cause - 

ID Recurrence Control 


Total Criticality 

No. 1 2 3 N 


2 Nozzle Tubes 

(a) Ruptures, Leaks— Local Overheat— Cutoff 

Sequence Change 5 

(b) Leaks— From Previous Repairs— Repair 44 

(c) Leaks— Braze Bond & Voids— RA 1607 — 

014 Amended 18 

(d) Cracks— Incorrect Braze Alloy— IL-78- 

CD-3139 3 

(e) Cracks— Local Thermal Strains & Flow 

Restr. --Thicker Wall Tubes 41 

(f) Cracks— Mi shandl ing — Repair as Necessary 2 

(g) Ruptures --Inadequate Expm. Band Design- 

Design Change 2 

(h) Leaks — Strains @ Braze Bonds — Fabrication 

Change 36 

(i) Leaks— Internal Corrosion— Planning 

Change 6 

(j) Leaks— Open 4 

4 Brazing Voids on Tubes 

(a) Brazing Voids — Inadequate— Doublers 

Installed 7 

/ L \ ~ -i- r T. .L . . Tl *i » I . . 

\ “ / — — r* ~ * -.«-****. w. . mw imvi mu i utocui u iuii 

None 4 

(c) Separation of Tubes — From Previous 

Repair— None 1 

3 Nozzle Plating Failure — Inadequate— Steerhorn — 

Redesign 1 

1 Nozzle Fel.dline Wall Thickness Undersize — 

Metal Ground— Redesign 1 

14 Nozzle Tubes— Secondary Fai lure— Injector Post 

Broke— Repair 1 

6 Welds 

(a) Support Bracket to Hotbend Broke- 

Vibration— Reinforcement 1 

(b) Aft Manifold Weld — Vibration & Thermal 

Fatigue— None 5 

(c) Spot Welds— Broken From Drain Bracket- 

Redesign 4 

(d) Nozzle Bracket Weld Broke— Vibrations— 

Repair 1 

(e) TPS Spot Welds Broke Welds — Inadequate 

Welds— None 1 


5 
44 

1 15 2 

3 

41 

2 

2 

33 3 

6 

4 


7 

4 

1 

1 

1 

1 


1 

5 

4 

1 

1 


B-8 


A340 NOZZLE (CONTINUED) 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 




(f) Broken DFI Bracket Welds— Vibration — 
Add Clips 

2 

2 


(g) TPS Bracket Welds Fail--Added Loads— 
Eliminate Brackets 

9 

9 


(h) Steerhorn Fillet Welds— Transient 
Loads— None 

1 

1 


(i) Spot Welds, Fuel Supply Duct— Unspecif ied 
Routing— Spec. Change 

3 

3 


(j) Spot Welds DFI, Hyd Drain— Redesign 

2 

2 


(k) Spot Welds Broken— Random Failures— 
Configuration Change 

11 

11 


(1) Support Bracket Debonded— New Repair 
Procedure 

1 

1 


(m) Weld Broke-Vibration— Incomplete Weld — 
Repair 

4 

4 


(n) Broken Weld/Open 

7 

7 

11 

Outer Jacket 

(a) Cracks— Thermal Cycl ing— Reworked 

3 

3 


(b) Cracks— Fabrication— Change Fabrication 

1 

1 

15 

Hyd. Drain Bracket Broken— External Fire- 
Improved Design 

1 

1 

9 

Hot Band 

(a) Crack #9 HB— Previous Repair— Prepared 

2 

2 


(b) HB #9 Tube— Material Deterioration- 
Drawing Change 

2 

2 


(c) HB Pinholes— Stress Corrosion— None 

1 

1 


(d) Hyd. Drain & Hot Bend Leak— Transients— 
Redesign 

9 

9 


(e) Leak, Cold Weld-Inadequate Expm. HB— 
Design Change 

2 

2 


(f) HB Aft Manifold Leak-Strain Crack @ 
Braze— Fabrication Change 

1 

1 

10 

Filler Weld Wire Incorrect— Mixed Lots by 
Suppl ier— Caution 

1 

1 

7 

Joint Leaks 

(a) Leak @ F6.7— Seal Replaced 

1 

1 


(b) Leak @ F6. 10— Inadequate Requirements— 
Improved 

1 

1 


(c) Leaks @ F17— Seal Not Positioned— None 

4 

2 2 

19 

Tubes Blocked— Contami nation— Repair 

1 

1 



B-9 


I 

I 

I 

fe 

I 

i 

i 

i 

l 

9 

I 

I 

'V 

I 

V 

I 

I 

I 
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A340 NOZZLE (CONTINUED) 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

18 

TPS Bracket 




(a) Broken & Spot Welds--Loads— Redesign 

4 

4 


(b) Shifted--Open 

2 

2 

13 

DFI Straps Broken--Repair as Needed 

1 

1 

25 

TPS Foil Damage--Fab. Handl ing— Design Mod. 

5 

5 

5 

Contamination 




(a) In Joint-Inadequate Cleaning— Improve 




Cleaning 

1 

1 


(b) From Previous Repair— None 

1 

1 


(c) Deposit From External Source— None 

4 

4 

20 

Steerhorn Fire— Operational Strains— Fabrication 




Change 

1 

1 

21 

Insulation Damage, Loose— Interference, 




Thermal— Repair 

4 

4 

26 

Sheet Metal Seal Missing— Seal Thickness 




Increased 

1 

1 

23 

Joints— Misf it 




(a) Joint 17 Mi sal igned— Assembly— New Tool 

3 

3 


(b) Joint F6 & F6.4 Misaligned — Open 

1 

1 

27 

Drain Fan Damage— External Fire— Design Change 

1 

1 

16 

Temp. Sensor 




(a) Defective— Contamination— Replace New 




Location 

2 

2 


(b) Debonded— Handl ing— Repair 

1 

1 

17 

Radimeter 




(a) Defective— Contamination 

1 

1 


(b) Debonded— Handling— Person Notified 

2 

2 

8 

Installation Error-Bolts Loose-Procedure 




Change 

1 

1 

12 

Broken Studs on Nozzle Assy.— Ref. UCR A014085 

1 

1 

24 

Loose Bolts on Drain/Aft. Manifold— Open 

1 

1 



296 

2 285 9 


B- 10 


A600 FUEL PREBURNER 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Baffles (Erosion) 




(a) Erosion-Water & Ice--New Drying 




Procedures 

1 

1 


(b) Erosion--High Local Mixture Ratio-- 




Repair 

3 

3 


(c) Erosion--ASI Hot Gas Impingement— None 

7 

7 


(d) Erosion— Feed Coolant Channel Blocked — 




Open Coolant Holes 

2 

2 


(e) Erosion— Secondary Fai lure— Turb. Duct— 




Ref. UCR A018306 

1 

1 

2 

Baffles Cracked-High Mixture Ratio— Replace 




As Needed 

4 

4 

3 

Lox Posts Nonconcentric, Blocked 




(a) Nonconcentric— Improper Installation-- 




Correct As Needed 

2 

2 


(b) Slag Blockage— Reworked 

1 

1 


(c) Nonconcentric— Thermal Distortion— R&D 

1 

1 


(d) Blocked-- Install at ion— Reworked 

1 

1 

4 

Lox Posts Erosion 




(a) Erosion — Water & Ice — New Drying 




Procedure 

1 

1 


(b) Nibbl ing— Temp. Spikes, High Mixture 




Ratio — Repair 

14 

14 


(c) Erosion— Contamination— Repair as Needed 

1 

1 


(d) Crack in Oxidizer Post — Alternate Design 

1 

1 

5 

Face Plate Erosion 




(a) Erosion— Flow Inpingement — Divergent 




Liner Installed 

6 

2 4 


(b) Erosion — Water & Ice — New Drying 




Procedure 




(c) Box Pin Mi ssing— Erosion— Repair 

3 

3 


(d) Erosion— Slag In Fuel Anulus— Improve 




Design 

6 

6 


(e) Bowing Plate— Welding— Repair 

1 

1 


(f) Erosion— Fabrication Debris— None 

1 

1 


(g) Erosion— Blocked Coolant Orifice 

1 

1 


(h) Erosion— Unknown or Open 

7 

6 1 


(i) Erosion— Secondary Failure- 




Ref. UCR A018288 

7 

6 1 

6 

Face Plate Cracks— Low Cycle Fatigue— Hot 




Gas— Di vergent Liner Added 

2 

2 


B-ll 


A600 FUEL PREBURNER (CONTINUED) 


Fail. 

Failure Mode - Failure Cause - 

Total 

Criticality 

ID 

Recurrence Control 

No. 

1 2 3 N 

7 

Face Plate Deposits— Slags, Hot Gas Flow- 
Divergent Liner Added 

1 

1 

8 

Liner 




(a) Cracks— Overheat— Install Divergent 




Liner 

6 

6 


(b) Erosion— Fuel Annulus Restrictions 

2 

2 


(c) Erosion Unknown 

1 

1 

9 

Elliptical Plug Locked— Jam Not Installed 
Wrong— Repair 

1 

1 

10 

Elliptical Plug 




(a) Erosion— Direct Hot Gas Flow— Revised 




Installation 

3 

3 


(b) Erosion— Ring Installed Wrong— Repair 

2 

2 

12 

Coolant Holes 




(a) Plugged— Metal Braze Flux Contam. — 




Braze Discontinued 

1 

1 


(b) Blocked High Mixture Ratio, Slag — 




Repair as Needed 

1 

1 


(Cj rtuggea witn weia wire — improper 




Install at ion— Repair 

5 

5 


(d) Plugged During Cleaning— Change Procedure 

1 

1 

13 

Moly— Shield Cracks Thermal Strains/Pressure 
Loads— None 

9 

9 

14 

Fuel Sleeve 




(a) Hole Cracks— Water & Ice— Change Drying 




Procedure 

1 

1 


(b) Hole— Decayed c/o Purge-Change Shutdown 




Procedure 

1 

1 


(c) Cracks— Open 

1 

1 

15 

Contamination 




(a) Contamination in Coolant & Buffles — 




External Source— None 

3 

3 


(b) Contamination— Wire Brush Pneumatic Tool — 




Eliminate Tool 

1 

1 


(c) Contamination— Introduced During Rework — 




Alert Field Oper. 

1 

1 


(d) Contamination— Unknown 

(e) Contamination— Loose Retainer End- 

6 

5 1 


Design Change 

1 

1 


B- 12 


A600 FUEL PREBURNER (CONTINUED) 


Fail. Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 2 3 N 


16 

Liner Exit Mi smatched--Mfg. --Rework 

1 


17 

Air Damp Cap Undersized--Thermal Loads — None 

1 

1 

18 

Inspection Crack-Pressure Cycled (One Engine)— 
Eng. Removed 

4 

4 

19 

Igniter Cracks--Hot Gas Recirculation— None 

1 

1 

20 

ASI Done Cracks— Hot Gas Recirculation— None 

1 

1 

21 

Support Pins 

(a) Missing— Misinstal led— Improve Procedure, 
Design Rod 

19 

19 


(b) Extra Pins— Mi sinstalled 

3 

3 

22 

Coolant Holes Cracked— Distress— Procedure 
Change 

2 

2 

23 

Plug Weld Closure Eroded— Excess Braze — 
Procedure Change 

1 

1 

24 

Baffle Weld— Crack in Nicro F i 1 1 er — 
Penetration — Welds Improved 

15 

15 

25 

Elliptical Washer Cracks— Residual Stress- 
Repair 

1 

1 


171 2 165 


4 



B- 13 
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A700 OXIDIZER PREBURNER 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Lox Posts 

(a) Slight Melting--Normal After PFC Tests— 
None 

1 

1 


(b) Erosion— Contamination in Fuel Annulus— 
None 

2 

2 

2 

Lox Orifices Cracks— Hot Gas Recirculation— 
None 

2 

2 

3 

Lox Post, High Eddy Reading — Work Hardened — 
Spec Change 

1 

1 

4 

Liner Erosion-Contamination in Fuel Annulus— 
None 

1 

1 

5 

Dome — Void— None 

1 

1 

6 

Welds 

(a) Weld— Bui ldup— Revised Drawing 

1 

1 


(b) Weld #3 Hairline Crack— Open 

1 

1 

7 

Lox Post Support Pin Dislodged Installation 

uci tyn cnanyc 

X 

X 

8 

Contamination From Fuel Filter External to 
Engine— El iminate Filter 

1 

1 

9 

Contamination From Heat Shield Failure- 
Redesign 

1 

1 



13 

13 
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B200 HIGH-PRESSURE FUEL TURBOPUMP 


Fail. 

Failure Mode - Failure Cause - 



i 

ID 

Recurrence Control 

No. 




1 

Liftoff Seal 






(a) Leakage— Contamination in Bushing 






Groove— None 

5 

1 

4 



(b) Dimension Discrepancies— Mfg.— 






Supplier Notified 

4 

2 

2 



(c) Low Noise Load— Not Repeating— Repair 

2 


2 


2 

Fishmouth Seal 






(a) Rubbing or Cracks— Overheat of Turb. 






Bearing Support— Redesign 

6 


6 



(b) Cracks— Thermal Caused— Redesign 

(c) Yielding — Inherent Thermal Stress — 

6 


6 



Ref. UCR A011185 

2 


2 



(d) Rubbing— Turbine Blade Platform— 






Temperature — Redesign 

2 


2 



(e) Gouged— Secondary Fail, Dampers— None 

(f) Erosion— Temp. From ASI— Coolant Hole 

1 


1 



Enlarged 

2 


2 


3 

Labyrinth Seals 






(a) Cracks, Rubbing @ Teeth— High Cycle 






Fatigue— Clearance Changed 

3 


3 



(b) Failure Unknown? 

(c) Seal Conf iguration— Vib, Suction Low, 

1 


1 



Procedure Changed 

2 



2 


(d) Erosion— Contamination— None 

1 


1 


4 

Seals 






(a) Groove Out of Tolerance— Thermal 






Gradients — Maintenance 

9 


7 

2 


(b) Break Torque High— Rubbing of Seals 






(Interstage)--None 

8 


7 

1 


(c) Contaminant on F/U Seal — Unknown — None 

1 


1 



(d) Fractured Hydrogen Embrittlement— None 

(e) Binding G-6 Seal Improper Install.— 

6 


6 



Planning Change 

3 


2 

1 


(f) Tip Seal Damage— Secondary Failure 






Contaminated— Fix 

3 


3 



(g) Tip Seal— Overheat Fatigue— Material 






Change 

3 


3 



(h) Tip Seal Gauges — Cracked Housing Pilot 






Lip— Redesign 

1 


1 



(i) Max. Leak Rate— Old Configuration — New 






Configuration 

2 


2 
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B200 HIGH-PRESSURE FUEL TURBOPUMP (CONTINUED) 


Fai 1 . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 


(j) Seal Separating — Secondary Failure 

2 

1 1 


(k) Kel-F Seal Damage— Retainer Motion- 
Redesign 

2 

2 


(1) Seal Crack/Leak — Low Cycle Fatigue — 
None 

1 

1 


(m) G5 Seal Grooves Stained— Residual Com- 
bustion Products— None 

2 

2 


(n) Pitting on G-5 Seal— Secondary— Ref . 
UCR A014015 

1 

1 


(o) Kel-F Seal Fai lure— Secondary — Special 
Inspection 

1 

1 


(p) Broken Seals— Undetermined 

3 

3 


(q) Delaminated Seal — Inadequate Cleaning — 
Material Change 

1 

1 


(r) Leak Joint F-4 — Oversize Groove — 
Planning Change 

1 

1 

5 

Turbine Blades— Erosion 

(a) Erosion, Burnt— Secondary Failure- 
Ref. UCR A016031 

1 

1 


(b) Erosion, 1st Stage— Transient Thermal 
Environment— Redes i an 

4 

3 1 


(c) Erosion— Rubbing, Overspeed — None 
(Normal ) 

1 

1 


(d) Erosion— Thermal Environment— Redesign 

2 

2 

6 

Blades— Cracked, Damage 

(a) Deformed/Drawings— Contami nation— Seal 
Redesign 

5 

5 


(b) Cracked Blade— Combined HCF/LCF— 
Inspection 

1 

1 


(c) Blade Failures, Premature Cutoff — FPB 
Conf iguration— None, Unique Conf. 

1 

1 


(d) Cracked Shunks — Low Cycle Fatigue — None 

2 

2 


(e) Fracture — Moisture — New Drying Procedure 

1 

1 


(f) 2nd Stage Damage— Dislodged Damper- 
Ref. AO 13999 

1 

1 

7 

Turbine Platform Erosion— ASI Temp.— Redesign 
& Coolant Holes Enlarged 

12 

11 
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B200 HIGH-PRESSURE FUEL TURBOPUMP (CONTINUED) 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

8 

Sheet Metal 

(a) Cracking — Fitup Weld Variation— Inspect 

8 

8 


(b) Crack in Turbo Shroud— High Cycle 
Fatigue— Material Change 

1 

1 


(c) Crack— Secondary Failure 

1 

1 


(d) Cracking— Full Power Level (FPL) — Monitor 

2 

2 


(e) Crack-Weld Bead Notch — Design Change 

2 

2 


(f) Cracks— Built in Insuff iciency— Redesign 

35 

35 

9 

Inlet/Discharge 

(a) Linear Cracks— Overstressed— Spec Change 

1 

1 


(b) Cracks— High Cycle Fatigue— Monitor 

2 

2 


(c) Cracks— Insuff icient Joint Strength- 
Spec. Change 

2 

2 


(d) Damage— Open 

1 

1 

10 

Synchronous Vibration— Unknown— Limit Unbalance 

1 

1 

12 

Vanes 

(a) Turbine Edge Damage— Debris, Secondary 
Failure— Ref. A012653 

1 

1 


(b) Erosion, FPB Malfunction— UCR A004402 

3 

3 


(c) Erosion, 1st Stage— High/Low Cycle 
Fatigue— Material Change 

6 

6 


(d) Burn Through— Secondary Failure- 
Ref. UCR A016031 

2 

2 


(e) Nick — Weld Operation— Rework 

2 

2 


(f) Erosion, Hot Preburner Start-Limit 
Established 

1 

1 


(g) Hole— Open 

1 

1 


(h) Erosion— Rapped Gas Pocket— Life Limit 
Established 

5 

5 


(i) Material Missing— Open 

1 

1 

13 

Rub Ring Warped— Misinstalled—Notif ied Person 

1 

1 

14 

Contamination 

(a) Self-Generated— No Problem 

5 

5 


(b) Instal lation— None 

12 

12 


(c) Unknown, Minor, Gold— None 

26 

25 1 


(d) Bearing Debris— None 

1 

1 


(e) Spring Debris— Vibration— None 

2 

2 


(f) Blade Rubbing Redesign 

1 

1 


(g) Heat Shield Damage— Secondary, UCRA015968 

5 

5 


(h) Unknown— Suspect Seal Wear 

5 

5 


(i) Ref. UCR A004585 

1 

1 
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B200 HIGH-PRESSURE FUEL TURBOPUMP (CONTINUED) 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

16 

Struts/Posts 

(a) Cracks--Sheet Metal Fitup & Weld 
Variations— Inspect 

47 

47 


(b) Cracks--High Cycle Fatigue, FPL — 
Posts Modified 

15 

14 


(c) Cracked— Oversized Electrode Repair 

3 

3 


(d) Cracks — Weld Bend Notch— Design Change 

3 

3 

17 

Nickel Insulation Damage-Repair as Needed 

9 

9 

18 

Bolt Holes Cracks—Internal ly Induced — 
Redesign Turbine 

8 

8 

19 

Impeller Broken— Internal Rubbing— Material 
Change 

1 

1 

20 

Bellows Shield 

(a) Cracks— Thermal Spikes— Inspect 

1 

1 


(b) Crack— High Cycle Fatigue— ECR 09689 

5 

5 


(c) Crack— Machining — None 

3 

3 


(d) Weld Crack— Tolerances— Change Planning 

1 

1 


(e) Cracks— Open 

1 

1 

21 

T/A Manifold 

(a) Cracks— Thermal Gradients — Repair 

3 

3 


(b) Damage— Weld Fai lure— Planning Change 

1 

1 

22 

Bearing Balls 

(a) Thrust Ball Cracks— Dry Lube Overheat — 
Maintenance 

4 

4 


(b) Loose — Improper Swage — Planning Change 

1 

1 


(c) Streaks Eccentric Wear— Tool ing— Correct 

2 

2 


(d) Wear— Cantom. Unknown? 

1 

1 

23 

Shaft Insert Wear with Balls— Ref. UCR A003411 

1 

1 

24 

Bearing Race 

(a) Wear— Contamination-None 

1 

1 


(b) Scoring— Outer Race Preload— Ref. A011480 

1 

1 


(c) Cracked— Misalignment Planning Change 

1 

1 

25 

Turbine End Ring 

(a) Cracks— Sheet Metal & Weld Variations— 
Maintenance 

2 

2 


(b) Plating & Peeling— Ambiguous Rework 
Specs— Change Specs. 

1 

1 
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B200 HIGH-PRESSURE FUEL TURBOPUMP (CONTINUED) 


Fail. 

Failure Mode - Failure Cause - 

Total 

Criticality 

ID 

Recurrence Control 

No. 

1 2 

3 N 

26 

Coolant Liner Bulged High Pressure— Thicker 
Liners 

2 


2 

27 

Dog Bone Wt. Fragmented— High Cycle Fatigue- 
Specs Change 

1 


1 

28 

Cav. Sense Line Damage— Instal led Wrong- 
Redesign 

1 


1 

29 

Slag Erosion G-5 Ft. Fuel Annulus— Improved 
Design 

1 

1 


30 

Subsynchronous Vibration 





(a) Increasing— Pump End Imbalance— Limit 





Allowable 

1 


1 


(b) High Vib— Wear on Preload Springs — 





Seals Modified 

1 


1 

31 

Shaft Travel 





(a) Excessi ve— Unknown Reason — None 

(b) Excessive Wear on Balance Piston 

8 


6 2 


Orif ice— OK 

3 


3 


(c) Low— None— Within Toler. 

2 


2 

32 

Fuel Drain Leak— Excessi ve— None (Within 
New Specs) 

1 


1 

33 

Fuel Discharge Part Crack (Weld)--Penetration — 
Planning Change 

1 


1 

34 

Preload Springs Worn— Vibrations— Interstage 
Seal Change 

1 


1 

35 

Blacking Pin 





(a) Sheared— High Torque— Planning Change 

2 


2 


(b) Missing— ASI High Temp. --New Material 

8 


8 

36 

Diffuser 





(a) 2nd Stage Broken— Interference Fit- 





Planning Change 

(b) Broke— Overaging During Heat Treat- 

3 

1 

2 


Repair 

2 

2 



(c) Gouge— Machining— Alert Tech 

2 


2 


B- 19 


B200 HIGH-PRESSURE FUEL TURBOPUMP (CONTINUED) 


Fail. Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 2 3 N 


37 Nozzle Cracks 

(a) Crack — Thermal Low Cycle Fatigue — 

Change FPB 1 

(b) Erosion--High Transients— Redesign 2 

38 High Accelerometer Signals 

(a) Vibration (16g) Cavitation Wrong Labyrinth 

Seal Conf .--Procedure Change 2 

(b) High Level s--Unknown — None 1 

39 Inlet Cap Nut 

(a) Crack/'Erosion-ASI Temperature— Redesign 13 

40 Saureisen Material Washed Out— ASI Temp. — 

Cool Hole Mode 4 

41 Nuts & Washers 

(a) Missing From Shield — Unknown-Interim 

Design 2 

(b) Loose Nut—Typical—None 4 

(c) Discharge Bolt Loose-Open 1 

(d) Lugs Missing-Open 1 

42 HPFT (Water Contamination) 

(a) Water Trapped in Pump— None 2 

(b) Water in Bellows— New Drying Procedure 3 

(c) Moisture in Bearing Support — None 1 

44 Inlet Fai lure— Pump Cavitation— Requirements 

Change 1 

45 Bearing Support 

(a) Crack— Open 1 

(b) Crack— Insuff icient Joint Strength- 

Limits Estab. 2 

46 Missing Damper— Damaged Blades— Open 2 

47 Dimension Discrepancies— Afterburn— New Specs 1 

48 Seal Tabs 

(a) Cracked— Load— Redesign 1 

(b) Missing— Hot Gas Impingement— Redesign 1 


457 


1 

2 


2 

1 


13 


4 


2 

3 1 

1 
1 


2 

3 

1 


1 


1 

2 

2 

1 


1 

1 

3 11 429 14 
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B400 HIGH-PRESSURE OXIDIZER TURBOPUMP 


Fail- Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 2 3 N 


1 Bearings--Bal Is 

(a) Discoloration--Superf icial--None 2 

(b) Spall ing--Transient Axial Forces— 

Redesign 14 

(c) Surface Distress & Spal led— Bearing 

Loading— Solid Film Lab. Added 14 

(d) Undersized Ball — Loading Condition- 

Solid Film Lab 4 

(e) Surface Distress, Wear— Secondary Fail.— 

UCRA006806 1 

(f) Gold Contamination— Temp. Aggravation 

of AU Plate— Studies 1 

(g) Surface Distress— Fluid Jet Impinge on 

Cage — Redesign 2 

(h) Spall ing/Surface— Distress— Bearing & 

Vib. Problems IL 170TM- 1594 4 

(i) Spalled/Undersized— Open 3 

2 Bearing Cage/Cartridge 

(a) Contamination in Cartridge— Improved 

Cleaning 5 

(b) Fretting— High Transient Axial Loads — 

Acceptable 2 

(c) Cage Delamination — Drawing Change 1 

(d) Cage Frayed— Fluid Environment — Limit 

Established 11 

(e) Cage Damage— Machining— None 1 

(f) Cage Delamination— Loading Condition — 

IL 170TM-1594 3 

(g) Wear/Cartridge— Secondary Failure— 

A006806 1 

(h) Cartridge Dry— Lubeworn-Bearing Loading — 

IL 170TM-1594 2 

(i) Cage Delamination Fluid Jet Impinge— 

Redesign 1 

(j) Cage Delamination— Open 1 

(k) Rub Mark— Bearing & Vib. — IL 170TM-1594 1 

3 Bearing Races 

(a) Wear— Loading Condition— IL 170TM-1594 4 

(b) Inner Race Raised— Bearing & Vibration 

IL 170TM-1594 1 


2 

7 7 

11 3 

4 

1 


1 

2 

4 

3 


5 

2 

1 

11 

1 

3 

1 

2 

1 

1 

1 

4 
1 


Isolator Fretting— Insuff icient Clampinq Load — 

None 1 1 


4 
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B400 HIGH-PRESSURE OXIDIZER TURBOPUMP (CONTINUED) 



e - Fai 
rence C 


Impeller 

(a) Rust Deposits— Moisture— Precaution 

(b) Cavitation Erosion— Normal— None 

(c) Rubbing Secondary Failure— UCR A004664 

Primary Seal 

(a) Breakway Torque High— Rubbing of Seal- 
Spec. Change 

(b) Yield of Seal— Design Change 

(c) Leakage— Ref . UCR A006374 

Tip Seal— Breakaway Torque High— No Problem 

K-Seal Leak-Improper Instal lation— Personnel 

Lateral 

Labyrinth Seal 

(a) Metal Contam. @ Teeth — Planning Error — 
Change 

(b) Rubbing— Paddles Oversized— Part 
Elevated 

Coal / Of hov*) 

(a) Seal Wear— Old Shaft Sleeve — New Design 

(b) Secondary Seal, Leak — Roughened Shaft 
Sleeve— New Material 

(c) Seal Leak— Improper Installation- 
Planning Change 

(d) Int. Seal Pressure Dropped— Coolant 
Blockage— Redesign 

(e) Pits on Seal Washer Crack — Improper 
Staking Tool— New Tool 

(f) Seal Groove to Deep— Inspection Advised 

Bellows Shield 

(a) Scratches— Normal Installation— None 

(b) Crack Thermally Induced— Design Change 

(c) Compressed Improper Installation— 
Adhere 


Cr i t i cal it 


1 2 3 N 


CVJ U> r-l 00 CVI CVJ 
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B400 HIGH-PRESSURE OXIDIZER TURBOPUMP (CONTINUED) 


Fail. 

Failure Mode - Failure Cause - 

Total 

Criticality 


ID 

Recurrence Control 

No. 

1 2 3 

N 

12 

Nozzle Vane 





(a) Erosion--Installation Damage--None 

1 

1 



(b) Cavitation Wear— Normal— None 

2 

2 



(c) Erosion— c/o Purge El iminated— None 

(d) Eroded— Hot Gas Imbalance— OPB/FPB 

1 

1 



Modified 

1 

1 



(e) Erosion— FPB Injector Failure— None 

1 

1 



(f) Metal Folded Over Vane— Machining— None 

(g) Erosion— Modif ied Start Sequence-- 

1 

1 



Modify OPOV Command 

1 

1 



(h) Crack — Erosion— Open 

3 

3 


13 

Shaft Sleeve Wear— Old Conf iguration— 
New Design 

1 

1 


14 

Contamination 





(a) Metal Contam. — Unknown — None 

23 

23 



(b) Krytox Excess-Leak— Techs Alerted 

4 

3 

1 


(c) Contam. From Other Fai lures— None 

4 

3 

1 


(d) Contam. From Turbine Damper Failure — None 

(e) Gold Rub on Housing— High Thrust @ 

1 

1 



Shutdown— None 

2 

2 



(f) Contamination Material During Machining- 





Personnel Alerted 

7 

7 



(g) Gold Splatter on Turb. Blades— Bonding 





of AU (Temp. )— Study 

8 

7 

1 


(h) Oil Contam. --Transport of Aircraft- 





Add Inspection 

1 

1 



(i) Metal— Filter Breakdown ECR 10370 & 10347 

(j) Contamination— Improper Staking Tool — 

1 

1 



New Tool 

1 

1 


15 

High Break Torque 





(a) Rubbing of Seals— None 

(b) Out of Spec.— Old Shaft Sleeve— New 

18 

18 



Configuration 

1 

1 



(c) Primary Seal Rubbing— Heated Krytox— 





New Spec. 

2 

2 



(d) Yield of Primary Seal— New Design 

(e) Particles of Dampers Floating— Change 

2 

2 



Dampers 

2 

2 


17 

Strut Assembly 





(a) Damage— Assenbly/Disassembly — None 

3 

3 



(b) Erosion— Leaky OPOV— UCR A017523 

1 

1 



(c) Cracks— Unknown— Estimate Limits 

6 

6 
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B400 HIGH-PRESSURE OXIDIZER TURBOPUMP (CONTINUED) 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

18 

Drain Line 




(a) Mux Leakage Exceeded--UCR A011981 

2 

1 1 


(b) Draw Line Tan Tube Leak--Unknown — 




Material Change 

2 

2 

19 

Housing 




(a) Pin Leak @ Pump Hsg.--Lock Wire Hole 




Inadequate--Redesign 

1 

1 


(b) Rubbing--High Thrust Loads @ Shutdown— 




Study 

1 

1 


(c) Cracks—Unknown/Open— Plan to Determine 




Life Limits 

10 

10 

20 

Turbine Blades—Cracks 




(a) Cracks— High Cycle Fatigue— Periodic 




Inspection 

19 

19 


(b) Chips— Fabrication/Manufacturing— None 

2 

2 


(c) Broken— High Cycle Fatigue— Design 




Improved 

1 

1 


(d) Slay & Cracks — Main Injector Failure — 




None 

1 

1 


(e) Damage— Bearing Loading Condition— 




iL-i/u m-iosH 

i 

1 

21 

Blades Erosion 




(a) Erosion— Unknown — None 

1 

1 


(b) Erosion— Secondary Failure — UCR A010631 

1 

1 


(c) Erosion— Hot Start— OPOV Command Change 

1 

1 

22 

Sheetmetal 




(a) Burnt— Main Injector Failure— None 

1 

1 


(b) Cracking Establish Life Limits 

6 

5 1 

23 

Shaft Rubbing— High Axial Thrust— Design Change 

1 

1 

24 

Locks Broken— Ductile Overload— Change 

2 

2 

25 

Eccentric Ring— Installation Error—None 

1 

1 

26 

Bearing Support 




(a) Fretting— Not Detrimental— Add Preload 




Spring 

3 

3 


(b) Pitting— Open 

2 

2 

27 

Inducer Vane Out of Contour Handling— Person 




Alerted 

1 

1 
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B400 HIGH-PRESSURE OXIDIZER TURBOPUMP (CONTINUED) 


Failure Mode - Failure Cause - 
Recurrence Control 


Total Criticality 

No. 1 2 3 N 


Diffuser Vane Damage— High Cycle Fatigue- 
Redesign 

Jet Ring 

(a) Flow Tubes Damaged— High Cycle Fatigue- 
Life Limits Established 

(b) Cracks Residual Welding Stress— None 

(c) Obstructed— Open 

Wave Preload Spring 

(a) Improper Installation— Planning Change 

(b) Worn Spring-Secondary Failure— 

UCR A006806 

(c) Spring Land Worn— Loading Problems— 

I L- 170TM- 1594 

Carbon Seal Ring Worn— Coolant Blockage — 
Design Mod 

Turb. Blade Dampers Broken— High Cycle 
Fatigue— Revision 

Subsynchronous Vibration 

(a) Bearing Loading Condition— 

I L- 1 70TM- 1314 

(b) Bearing & Vibration Problems— 
Development Plan IL-170TM-1594 

Synchronous Vibrations 

(a) Bearing & Vibration Problems— 

IL-170TM-1 594 

(b) Instrumentation Problem— None 

(c) Inadequate Balance— Green Run 

Isolater Dri Lube Wear— Secondary Failure— 
None 


Nuts & Washers 

(a) Nut Cavitation— Installation/Disassembly- 
Maintenance 

(b) Nut Cavitation— Pumping Action of Lobes— 
Design Change 

(c) Washers Broken— Improper Staking Tool — 
New Tool 


3 


3 
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B400 HIGH-PRESSURE OXIDIZER TURBOPUMP (CONTINUED) 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

37 

Roll Pin Cracked--Suspect Grain Bonding 
Carbides--None 

1 

1 

38 

Turbine Disk 

(a) Damage Surface — Jet Ring Secondary 
Failure— UCR A006735 

1 

1 


(b) Cracks on Au Plating— Low Cycle 
Fatigue— None 

1 

1 


(c) 2nd Stage Rubbing— High Thrust Loads @ 
Shutdown— Study 

2 

2 

39 

G-3 Area, Water Trapped— New Drying Procedure 

1 

1 

40 

Liver Erosion — Open 

1 

1 

41 

Bolt Hole Flange Cracks— Open 

1 

1 

42 

Weld Cracks— Fatigue— Add Dye Penetrant 
Inspection 

1 

1 

43 

Turbine Inlet 

(a) Plating Worn— High Thrust Loads— None 

/ 1 \ A a 4 • X. v ^ 

1 

1 


K u / ^ 1 wuoi iiiy ucuccf impi uvc iny 

1 

i 


(c) Cracks— Determine Life Limits (Fatigue) 

8 

8 

44 

Fir Tree 

(a) Gold Mi ssing— Poor Adhesion — None 

1 

1 


(b) Cracks in Gold— Open 

1 

1 

45 

Shaft Travel— Bearing Loading— I L- 170TM- 1594 

1 

1 


331 

7 11 302 11 




B-26 





B600 LOW-PRESSURE FUEL TURBOPUMP 


Fail. 

Failure Mode - Failure Cause - 


Criticality 

ID 

Recurrence Control 


1 2 

3 N 

i 

Turbine Blades 





(a) Dings--Engine Generated Ding— None 

1 


1 


(b) Dent— Fabricated— None 

1 


1 

2 

Pump Inlet Gauge— Open 

1 


1 

3 

Bearings— Improper Installation— Planning 
Revision 

1 


1 

4 

Labyrinth Seal Rubbing — Max. Torque 
Excess ive— Redesign 

10 

1 

9 

5 

Liftoff Seal 





(a) Carbon Nose Rubbing — High Torque — None 

1 


1 


(b) Carbon Nose Fai lure— None 

1 


1 


(c) Squeal — Rubbing— None 

2 


2 

6 

Turbine Inlet Nicks— Temp. Sensor Debonded — 
A017772 

1 


1 

7 

Vibration 





(a) Suction Pressure— None Found 

1 

1 



(b) Synch Vibration 

1 


1 


(c) Rubbing 0 Labyrinth Seals— Design Change 

2 


2 

9 

Nickel Insulation 





(a) Ruptured— Mishandled— Silicon Repair 

1 


1 


(b) Split-Engine Generated Ding— None 

1 


1 


(c) Crack— Moisture Entry— Field Repair 

6 


6 


(d) Insulator Boots Loose— Installation— None 

2 


2 

10 

Contaminated 





(a) Suspect Dust Cover — Awareness 

2 


2 


(b) Contamination— Inadequate Clearing— Alert 

2 


2 

11 

Excessive Torque 





(a) Torque Anomal ity— Not Failure 

(b) Copper Plate Bui ldup— Labyrinth Seal 

1 


1 


Redesign 

7 


7 


(c) Excessive Torque— None 

1 


1 

12 

Housing Copper Plate Damage— Unknown Repair 

1 


1 

13 

Omniplate Crack-Previous Repair Damage — None 

1 


1 

14 

Joint F2 Cut— Installation Error— None 

* 

i 


1 



B-27 


B600 LOW-PRESSURE FUEL TURBOPUMP (CONTINUED) 


Fail . 
ID 


Failure Mode - Failure Cause - 
Recurrence Control 


Total Criticality 

No. 1 2 3 N 


15 

Locking Tubs Loose-- Improper Handling- 
Tech Alert 

1 

16 

Fuel Feed Leak— Thermal Cycling— None, 
Repair 

1 

17 

Impeller/Inducer 



(a) Scuff Mark— Not Detrimental 

1 


(b) Ding— Open 

1 


1 

1 


1 


1 


18 R&V Patch Loose--Moi sture None, Repair 1 


1 


19 


Nuts--Rub Marks--Open 


1 


20 

21 


22 


Stator Shroud Low Pressure Misbraze — 

Revise Drawing 1 

Nozzle 

(a) Erratic Pressure--New Nozzle Conf.— 

Not Detrimental 1 

(b) High Pressure Drop--Excessi ve Nozzle 

Block--Rework 1 

(c) High Pressure Urop--Open 1 


Leak Not Detrimental--None 

59 


1 


1 


1 

1 

1 

3 “49 "7 


B-28 


B800 LOW-PRESSURE OXIDIZER PUMP 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Bearing Balls 




(a) Worn Thrust Bal 1 s--Hi gh Torque— 




Track Bearings 

1 

1 


(b) Coating Contaminated During Installa- 




tion. Notify Techs 

1 

1 

2 

Bearing Cage Friction— None 

16 

16 

3 

Bearing Journal Vibration — Journal 




Undersized — Planning Change 

1 

1 

5 

Seals Groove Oversized-Hand Lapping — 




Planning Change 

1 

1 

6 

Stator Silver Plate— Lifted— Open 

1 

1 

7 

Bolt Hole Rust Deposits— Iron Bolts— Replace 

1 

1 

9 

Contamination 




(a) Metal— Transducer Base— Ref. UCR A012678 

4 

3 1 


(b) Steel Chip— Main Vane Assembly— None 

2 

2 


(c) Teflon Pieces @ Ring Nozzle— Tool — None 

1 

1 


(d) Shop Debris— Ref. UCR A015786 

3 

2 1 


(e) Contamination— Unknown Source — Awareness 

16 

16 


(f) Coatings on Bearings— Glove Fragments — 




Mfg. & Inspect 

1 

1 


(g) Silver in Turbine Section— None 

1 

1 


(h) Contamination-Discharge Duct Failure — 




UCR A011506 

1 

1 


(i) Grease— Assembly Error— None 

1 

1 


(j) Metal on Rotor Arm— Open 

1 

1 


(k) Deposit on Nozzle Vanes & Surface— Open 

2 

2 

10 

High Break Torque 




(a) Ball Speed Variation at Low Speed— OK 

3 

3 


(b) Bearing Ball Wear— Truck Bearing Wear 

1 

1 


(c) Cage-Bearing Friction— None 

17 

17 


(d) Silver in Turb Section— None 

1 

1 

11 

Shaft Travel 




(a) Bearing Wear— Track Wear 

1 

1 


(b) High Axial Load — Reduced m/s Axial Thrust 

4 

4 


(c) Wear— Not a Failure— R&D 

2 

2 

12 

Erroneous Cutoff-FASCOS Inaccurate Redline— 




New Red Line 

1 

1 


L 



I 

I 


13 Flange 

(a) Undercut on Surf ace--Misal ign— None 1 

(b) Raised Metal, Nick--0pen 2 

14 Inducer Leading Edge Rolled Over--Improper 

Handl ing--None 1 

16 Plating Chipped-Interference Fit— Revise Spec. 1 


1 

2 




B-30 


C100 CHECK VALVES 


Fail. Failure Mode - Failure Cause - T< 

ID Recurrence Control I 


1 FPB Purge Check Valve Leak-Dri-Lube From 

Flange Bolts--Alert 2 

2 OPB Purge Check Valve Leak — Leak Not Verified 1 

3 Oxidizer Dome Purge Check Valve 

(a) Reverse Leak--Contamination, Unknown 

Source — None 1 

(b) Leak--Not Verified 1 

4 Fuel Purge Check Valve Leak — Momentary 

Stuck--None 1 

5 Fuel Purge Ch. Valve Pressure Spike — Closed? 1 

6 FPB ASI Check Valve 

(a) Leak Sticky Poppet, Fabrication, Add 

Inspection 1 

(b) Seat Leakage--Contamination--None 1 

(c) Leak--0pen 1 

7 OPB ASI Check Valve Leak — Poppet Bore 

Interference Inspect 1 


11 


■ 


2 


1 

1 


1 

1 


1 

1 

1 


_1 __ 
10 1 



I 

I 


B-31 


C200 PNEUMATIC CONTROL ASSEMBLY 



Fail. Failure Mode - Failure Cause 

ID Recurrence Control 


Total Criticality 

No. 1 2 3 N 


1 Helium Burst Diaphragm— DVS Test Induced 
Fatigue— Test Change 

2 Vent Seat, DVS Testing Leak — Inter. Seal Purge 
Pav— A017367 

3 Inlet Seat— Suspect Instrument Error— New Test 

Procedure 

4 Pneumatic Solenoid Leak— Seal Impressions— 
None, Repair 

5 Contamination 

(a) White Residue in Inserts— Gal vanic 
Corrosion— None 

(b) Lub Oil in PAVs — Source Unknown — 
Cleanliness 


1 

2 

1 

1 


1 

1 

7 


1 

2 

1 

1 


1 

1 

7 


B- 32 



C210, C250, C270, C300-S0LEN0ID VALVES, PAV 
HELIUM PRECHARGE VALVE 

, PNEU 

FILTER, 

Fail. 

Failure Mode - Failure Cause - 

Total 

Criticality 

ID 

Recurrence Control 

No. 

1 2 3 N 

1 

Emergency Shut Solenoid Sent Leak— Allowable 
Leak Rate 

1 

1 

2 

FPB Purge PAV Inlet Seat Leak— Not Substan- 
tiated— OK 

1 

1 

3 

Fuel Purge PAV (Pressure Activated Valve) 

(a) Leak— Leak Rate A1 lowable— Change Limits 

1 

1 


(b) Inlet Seat Leak— Transient Contam. --Clean 
and Use 

1 

1 

4 

HPOT Inter. Purge PAV 

(a) Leak— Inlet Seat Distortion — Poppet Seal 
Redesign 

4 

4 


(b) Dynamic Seal Leak— DVS Test Induced— 
None 

1 

1 

5 

PAV Internal Leak — Open 

1 

1 

6 

Man Chamber Dome PAV Vent Leak— Trans. 
Contamination— None 

1 

1 



11 

11 





B- 33 


D110 MAIN FUEL VALVE 


Fail. 

ID 


Failure Mode - Failure Cause - 
Recurrence Control 


Total Criticality 

No. 1 2 3 N 


1 Leaks 

(a) Ball Seal Leak— Scaling Factor Error — 

Person Alerted 1 

(b) Valve to Actuator Misclock— Change to 

Std. Height Blind Tooth 1 

(c) Internal— Suspect Contamination— Not 

Determined 1 

(d) Ball Seal Leak, Downstream Temp High- 

Contaminated— Leak Check 1 

(e) Leak, Static Seal— Defect— Isolated 

Incident 1 

(f) Primary Seal Leak— Dri— Film Particles— 

None 1 

2 Throat Sleeve Nicks— No Problem 3 

3 Housing Crack— Thermal Stress 0 Mfg.— Add 

Inspection 1 

4 Metal Contamination— Unknown Source— None 1 

5 Bearing 

(a) Washer Damage — Vi tret ice, Fatigue 

None, Isolated 1 

(b) Race Cracked— Not Determined Why 1 

6 Plating Separation — Handling Damage — 

Material Change 1 

7 Broken Cam Follower Guide — Cryogenic Temp. — 

None 1 


15 


1 

1 

1 

1 

1 

1 

2 1 

1 

1 


1 

1 


1 

_! _ 
14 1 


B-34 


D120 MAIN OXIDIZER VALVE 


Fail. 

Failure Mode - Failure Cause - 


Criticality 


ID 

Recurrence Control 


1 2 3 

N 

1 

Leaks 





(a) Deformed Bellow-Unknown — None, Isolated 





Case 

1 

1 



(b) Ball Seal Leak--Contamination--Unknown 





Source--None 

1 

1 



(c) Ball Seal Leak--Dri-Lube on Surface — OK 

(d) Ball Seal Leak Installation Position 

1 

1 



Marginal-Redesign 

1 

1 


2 

Inlet Discharge Sleeves Nicked— Debris— OK 

2 

1 

1 

3 

Bearing Retainer Hub Broke— Fatigue— 
Mov Spec. Change 

2 

2 


4 

Contamination Source Unknown — Inspection 

1 

1 


5 

Follow Guide Omitted in Assembly — Mfg. 
Oversight— Notify Person 

1 

1 


6 

Drift Open Installation Error Procedures 
Change 

1 

1 


7 

Bearing, Rusty— Isolated Case— None 

1 

1 


8 

Excessive Pressure @ Hotfire— UCR A008305 

1 

1 


9 

Water in Joint 07— Inadequate Closure — 
New Closure 

1 

1 




14 

13 

*1 




B-35 


I 

I D130 FUEL PREBURNER OXIDIZER VALVE 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

Criticality 


No. 


N 

1 

Leaks--Ball Seal 





(a) Ball Seal Leak--Particle Contamination, 
Unknown--None 

(b) Leak— Cracked Ball Seal, Poor Material 

1 

1 



Spec. Change 

(c) Leak-Discrepant Bel lows— None, Isolated 

1 

1 



Case 

1 

1 


2 

Leak (Other) 





(a) Suspect Leak— Marginal Bel lows— Spec. 





Change 

1 

1 



(b) Internal Leak— Particle Backflow — 




Closing Rate Change 

2 

1 

1 

3 

Ball Seal Damage— ASI Combustion Backflow- 
Personnel Alert 

2 

2 


4 

Cont ami nation- -Unknown Source— None 

1 

1 


5 

Bolt Stretch Error Caused Low Flow Rate- 
Personnel Alert 

2 

2 


6 

Suspect Over Pressurization— UCR A008305 

1 

1 


7 

Excessive Flowrate During Test— Normal 

1 

1 



13 

12 

"T 


B-36 


D140 OXIDIZE PREBURNER OXIDIZER VALVE 


Fail. 

Failure Mode - Failure Cause - 

Total 

Criticality 


ID 

Recurrence Control 

No. 

12 3 


1 

Ball Seal Leak, Hot Fire--Flow Reversed 
Combustion— Software Change 

1 

1 


2 

Flow Reading Low--None 

1 

1 


3 

Ball Seal Melting--ASI Combustion Backflow — 
Software Change 

20 

20 


4 

Contamination 

(a) Secondary From Steerhorn Failure— 

UCR A010997 

(b) Oily Substance on Flange— Unknown — None 

1 

1 


5 

Studs Overtorqued— No Failure — None 

2 

1 

1 

6 

Overpressure—UCR A008305 

1 

1 


7 

Excessive Flow Rate-Incorrect Test — 
Spec Change 

1 

1 


8 

Wall Sleeve Scratches — Unknown Source — 
Not Detrimental 

1 

28 

1 

27 

“I 


D150 CHAMBER CHART VALVE 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Slider Corrosion— Brown Dust None, OK 

1 

1 

2 

Roll Pin Broken Interference— Installation 
Changed 

2 

2 

3 

Studs 

(a) Overtorqued Improper Tool Use— Train 
Person 

1 

1 


(b) Overtorqued— Unknown— Repair 

1 

1 

4 

Contamination 

(a) Metal Clip— Handling— None, Clean 

1 

1 


(b) Unknown Source— Clean 

3 

__ 3 

A 


9 9 



B-37 


D200 BLEED VALVE 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 


Criticality 
1 2 3 N 

1 

Leak— Isolated Incident— None 

2 

2 

2 

LVDT Voltage Oscillation — Vibration, Fatique — 
Redesign 

_2 

2 


4 4 



D300 ANT I FLOOD VALVE 



Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

LVDT & Wiring 

(a) Output Voltage Low-Wire Fatigue — 
Spec. Change 

2 

2 


(b) Output Voltage Low-Handling Damage — 
None 

2 

2 


(c) Position Signal Eratic— Broken Probe, 
Vibs— None 

1 

1 


(d) Open Circuit— .High Cycle Fatigue— 
Hys Fillet Increased 

1 

1 


(e) Erratic Position Indication— Broken 
Wire— UCR A012535 

2 

2 


(f) Erratic Position Indication — Open 

1 

1 

2 

Poppet 

(a) Cracked Suspect Handl ing— Assembly Change 

1 

1 


(b) Cracked— Open 

1 

1 

4 

Separation @ Weld— Defecti ve— Weld Schedule 
Review 

I 

1 

5 

Piston Spring Broke— High Cycle Fatigue- 
Redesign 

1 

1 

6 

Valve Remained Open @ Shutdown— Not Lodged— 
Inspection Alerted 

1 

1 

7 

Indicator Bolts Incorrect Type— Supplied — 
Notified 

1 

1 


3 Contamination 

(a) Particle— Tapping Debris— Inspection 

Added 1 

(b) Source Unknown— Cleanliness _2 

18 


"T 


1 

_2 

15 


2 



B-38 


D500 GOX CONTROL VALVE 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 



1 

Seal--Leak 

(a) Leak, Reverse Flow--Seal Crack, 
Machining--Drawing Change 

1 

1 


(b) Leak--Insuff icient Sealing Strength- 
Leak OK 

2 

2 


(c) Leak-Source Not Determined— Inspect 

1 

1 


(d) Leak Cracked Seal, High Cycle Fatique 
Not to Print, Change 

1 

1 


(e) Seal Leak— Particle Contamination— None, 
In Spec. 

1 

1 


(f) Leak @ Part 024.1— Open 

1 

1 

2 

Supply Pressure Low— Open 

1 

1 


8 

8 



D600 RECIRCULATION INSULATION 

VALVE 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Leak 

(a) Internal Leak— A1 lowable Rate, OK 

2 

2 


(b) Leak — Fabrication— Planning Change 

1 

1 


(c) Upper Shaft Seal Leak— Thermally 
Induced, DVS Test, None 

1 

1 

2 

LVDT 

(a) Output Voltage Low— Shim Install Error 
Mfg. Alerted 

1 

1 


(b) Output Erratic— Armature Fracture, 
Fatigue— Redesign 

1 

1 

3 

Contamination 

(a) Metal 1 ic— Source Unknown— None 

1 

1 


(b) Brown Deposits— Unknown— None 

1 

1 


4 Housing to Shaft Wedging Wear--0pen 


l 

9 


1 

9 




B- 39 



Failure Mode - Failure Cause - 
Recurrence Control 


Total Criticality 

No. 1 2 3 N 


(a) Pin Plug Leak-Inadequate Seal— Add 
Leak Test 

(b) Wireway Leak— Epoxy Did Not Adhere — 
Process Change 

(c) Internal Leak— Tolerance Stackup — 
Detectable in Test 

(d) Hyd Oil Leak— Excessi ve Proof Test 
Cycl ing— None 

(e) Static Seal Leak— Burr Induced Scratch- 
New Inspection 

(f) Vent Port Leak— Defective 0-Ring— Open 

(g) Wireway Leak— Inadequate Epoxy Coverage — 
Spec. Change 

Hydraulic Lockup Drift— Mfg. Error— Detectable— 

None 

Slew Rate Error— Contamination— None 

Servo Switch Failed — Thermal Damage — 

Ref. UCR A001737 

RVDT Error— Mismatch to Actuator— Personnel 

Alerted 


Activator Failed to Close— Design Life 
Exceeded 


1 22 


B-40 


EOO 2 PREBURNER VALVE ACTUATOR 


Fail. Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 


1 Leaks 

(a) Wireway Leak-Inadequate Joint Seal- 


Surface Finish Change 1 

(b) Failsafe Servoswitch Leak--Not 

Determined— Replace, Detectable 2 

(c) Wireway Leak— Epoxy Sealant Did Not 

Adhere— Process Change 6 

(d) Servoswitch Leak— 0-Ring Omitted — 

Personnel Alerted 1 

(e) Wireway Leak— Open 4 

(f) Leak — Shaft Seal Surface Scratch, 

Handl ing — Inspect Change 1 

2 RVDT Channel Error— Bearing Freeplay — 

Configuration Change 1 

3 Bent Terminal, Dielectric Test Failure — 

Supplier Changed . 1 

4 Silicone Oil Contamination on Shaft— 

Unknown-Persons Alerted 1 

5 Vent Port Pitting— Unknown Cause- 

Personnel Alerted 1 


1 

1 1 

6 

1 

4 

1 

1 

1 

1 

1 


6 


Pneumatic Sequence Test Fai lure— Open 


_! 

20 


_1 _ 
19 1 


B-41 


E110 MAIN FUEL VALVE ACTUATOR 


Fail* Failure Mode - Failure Cause - 

ID Recurrence Control 


Total Criticality 

No. 1 2 3 N 


1 Leaks 

(a) Wireway Leak--Epoxy Did Not Adhere — 

Process Change 2 

(b) Vent Port Leak-Scratched Piston— 

None, Detectable 1 

(c) Vent Port Leak— Out of Round— Isolated 

Case, None 1 

(d) Servo Valve Leak— Dirt on 0-Ring, 

Assembly-Alert 1 

(e) Vent Port Leak— 0-Ring Nibbled by 

Movement— New Backup Ring 3 

(f) Wireway Leak— Insuff icient Epoxy 

Coverage— Procedure Change 5 

(g) Vent Port Leak— Open 1 

(h) Leak— Open 2 

2 Heater Blanket 

(a) Damage Handl ing— Technicians Alerted 2 

(b) Open Circuit— Defective Spot Welds— 

Inspection Added 1 

3 Servoswitch 

(a) Erratic— Insulation Damage by Pitting— 

Persons Alerted 1 

(b) Pull In-Drop Out Test Fai lure— Open 1 

Servoswitch 

(a) Erratic — Insulation Damage by Pitting — 

Persons Alerted 1 

(b) Pull In-Drop Out Test Failure— Open 1 

4 Contamination 

(a) Suspect Contam— UCR A018556 1 

(b) Particle in Shaft Cavity— Unknown— None 1 

5 Position Indicator Fai lure— Open 1 

6 Actuator 

(a) Handling Damage-Not Determined- 

Procedure Change 1 

(b) Improper Installed Warmer Insert- 

Procedure Change 1 

(c) Slow to Respond— Coil Short Circuit- 

Procedure Change 1 


2 

1 

1 

1 

3 

5 

1 

2 

2 

1 


1 

1 


1 

1 


1 

1 

1 


1 

1 



B-42 


E110 MAIN FUEL VALVE ACTUATOR (CONTINUED) 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

7 

Actuator to Valve Mating Proc. Error- 
Wrong Instructions— New Instructions 

1 

1 

8 

Hyd. Oil Wetting @ Servo-Anomaly— Tech Alerted 

1 

1 

9 

Washer and Spring Bent— Mfg. Procedure Error — 
Procedure Change 

1 

1 

10 

Failsafe Performance Test Failure— Open 

1 

1 

11 

Seal Damage-Housing Fab. Error— Tech Alerted 

2 

1 1 


35 

1 33 1 



E120 MAIN OXIDIZER VALVE ACTUATOR 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 


Criticality 
1 2 3 N 

1 

Leak 

(a) Leak— Contamination, Source Unknown— 
None 

1 

1 


(b) Hyd Oil Contaminated Induced Wear — 
Clean 

1 

1 


(c) Contam. Induced Cap Seal Scratches— 
Source Unknown— None 

1 

1 


(d) Leak— Housing to Actuator Cylinder- 
Pending Analysis 

1 

1 

2 

Contamination 

(a) Contam. -See UCR A018556 

1 

1 


(b) Hyd. Reservoir and Supply (Facility) — 
Purge Added 

1 

1 

3 

Wireway Nut Broken— Undetermined— None 

1 

1 

4 

Wire Insulation Cold Flow Marks— Vibration— 
Not Detrimental 

1 

1 


8 8 





B-43 


E 1 30 FUEL PREBURNER OXIDIZER VALVE ACTUATOR 



Failure Mode - Failure Cause - 
Recurrence Control 



1 

Leak 





(a) Dynamic Seal--Hyd. Oil Contam. Induced 





Wear--Clean and Maintain 

2 


2 


(b) Seq. Valve Seal Leak--0-Ring Shift — 





Redesign 

1 


1 

2 

Contamination 





(a) Suspect— UCR A018556 

1 


1 


(b) Contam. Facility Hyd. Reservoir- 





Drum Purge Added 

1 


1 

3 

Pretest Check Out FIDs— Suspect Contam.— None 

1 

1 


4 

O-Ring Defect— Personnel Alerted 

1 


1 

5 

Crank Fai lure— Obsolete Configuration — Replace 

1 


1 

6 

Sequence Valve Anomaly— Open 

1 


1 



9 

~ “I 

8 



E140 OXIDIZER PREBURNER VALVE ACTUATOR 


Fail. 

ID 

Fa.ilure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Forward Servo Leak— Not Determined— OK 
Use As Is 

1 

1 

2 

Contamination 

(a) Contamination— See UCR A018556 

1 

1 


(b) Facility Hyd. Reservoir Contam.— Drum 
Purge Added 

1 

1 

3 

Bolts Rusty— Cosmetic Condition— Change Bolts 

1 

1 

4 

Actuator Would Not Close— Crank Failure, 
Obsolete Conf .--Replace 

_1 

1 



B-44 


E150 CC VALVE ACTUATOR 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 


1 

Criticality 
2 3 N 

1 

Leaks 






(a) Internal-Tolerance Stuck Up— None 






Detectable 

1 



1 


(b) Pneumatic Seal Leak— Scratched Piston, 






Contain. --None, Detectable 

1 



1 


(c) Servo Valve Leak— Not Determined— OK, 






Use As Is 

2 



2 


(d) Wireway Leak— Insuff icient Epoxy 






Coverage— Spec. Change 

3 



3 


(e) Vent Port Leak— Damaged Orifice 0-Ring— 






Back Up Ring Added 

1 



1 

2 

Contamination 






(a) Contain. --Source Unknown — Personnel 






Alerted 

1 



1 


(b) Fac. Hyd. Reservoir Contam.— Drum 






Purge Added 

1 



1 

3 

Post Shutdown Purge Terminated Early— 






0-Ring Shift— Redesign 

4 

1 


3 

4 

RVDT 






(a) Comparison Limit Exceeded— Engine 






Flashback— None , Unique 

1 


1 



(b) Adjustment Error, Obsolete Design, 






Redesign 

1 



1 


(c) Insulation Resistance Low— None, 






Isolated, Detectable 

1 



1 

5 

Error Position FID, Suspect Contamination— 






None 

1 


1 


6 

Actuator Fai lure— Design Life Exceeded— Replace 

2 



2 

7 

Solenoid Screw Loose— Handl ing— Inspection 






Added 

1 



1 

8 

Servo Coil Open Circuit— None, Isolated Case 

1 



1 

9 

Servo Switch Land Wire Worn — Vibration — 






None, OK 

1 



1 

10 

Spring Guide Chaffed— Material Deficiency- 






Material Change 

1 



1 

11 

Pneu. Shutdown Out of Spec— Sleeve Not Per 






Drawing-Check Added 

1 



1 



25 

“I 

~2 

22 



N 


I 

I 


1 


RVDT Coil Voltage Erratic--Design Problem — 
New Design 


2 


2 


2 


Strength Test Failure--Add Insulation Tape 


1 

3 


1 

3 


B-46 

FOOO CONTROLLER 



1 Transistor 

(a) Memory Altered Ch. A or B— Lugs Too 

Long — Now Measure 2 2 

(b) Short Circuit-Sensitive to High 

Voltage/Temp— None 1 1 

(c) Ch. A P/S Shutdown-Shorted Transistor — 

Inspection Faded 1 1 

(d) Ch. A P/S Shutdown — Trans. Shorted to 

Chassis— None, Isolated 1 1 

(e) 400 Hz Input Power Overload— Emitter/ 

Collector Short— New Requirement 2 2 

2 Circuit Board 

(a) Fails to Execute Skip Instruct. --Loose 

Board — None 1 1 

(b) Ch. A P/S and Halt — Inproper Board 

Seati ng—None 1 1 

(c) Noise Coupl ing— Ungrounded Substrate — 

Grd. Strap Added 2 2 

(d) Ch. A Parity Error— Improper Board 

Seating— Board Ht. Measure 1 1 

(e) Ch. B Halt — IEGB S/N 19 Card— None 

Possible 1 1 


3 Wire 

(a) Open Circuit, Broken Wire— None 11 9 2 

(b) Open Circuit, Broken Wire— Handl ing— 

Alert Mfg. 1 1 

(c) Short-Pinched Wire Caused Xistor to 

Short-Use Tie Cord 1 1 

(d) Failed Self Test— Broken Land— None 1 1 

(e) Damaged Insulation— Enhanced Inspection 3 12 

(f) Parity Error— Wire Fractured by Rework— 

None 4 4 

(g) MOVA Failsake Servovalve Wire Break — 

Tooling Change/X-Ray 5 23 

(h) Short to Chassis— Insulation Cold Flow- 

Insulation Tape 2 2 

(i) Ch. B MFV Failure Reported— MIB Wire 

Broke— None 5 2 3 

(j) H/S Wire Output Low— Contam. Damage— 

None Applicable 1 1 

(k) DCUA Halt— Multiple Insulation Scrapes— 

Defective Tool Removed 1 1 

(l) DPOT Disch. Press. Fail .--Twisted, Pair 

Wire Damage— None 1 1 



FOOO CONTROLLER (CONTINUED) 


Total 

No. 


Critical it 




B-48 


FOOO CONTROLLER (CONTINUED) 


Fail. Failure Mode - Failure Cause - Tota 

ID Recurrence Control No. 


(c) Ch. B VE E I Not Copying— Mi swi red Pulse 

Transd.--Test Change 1 

(d) Failure--Incorrect Rework Wiring — None 1 

(e) Heater Failure--P/S Terminals Miswired— 

None 1 

(f) Command Ch. C Fai led--Miswired 

Connection--None 1 

(g) Int. Temp A, FID, Incorrect Resistor — 

Redesign Adapter 1 

(h) Command Channel C--Part Installed Wrong- 

Alert Person 1 

(i) FPOV Miscompare and Interrupt-Unsoldered 

Joint— Open 1 

11 Defective Plating — CCV FID— Improve Inspection 1 

12 OP Amps 

(a) Bad Reading — Low Op Amp Slow Rate — New 

Type Op Amp 4 

(b) Miscompare — Bad Op Amp — None, Replace 1 

(c) Miscompare— Particle In Op Amp— New Test 2 

(d) Sensor Failures, Out of Range— DC Offset— 

None 1 

(e) A/D Conversion FIDs — Amp Failure — None 2 

(f) Ch. B P/S Not Power Up— Op Amp Short, 

Particle Add X-Ray Test 1 

13 Wrong Indication— Heated Circuit— Add Jumpers 1 

14 Contaminated Contacts 

(a) Current Out of Tolerance— None 1 

(b) MOVA Feedback Miscompare— Sockets Contam. — 

None 1 

15 Diode 

(a) Premature Heat— Diode, High Junct. Cap.— 

Change Diode 1 

(b) DCUB PRI w/o PFI — Damaged Zener Diode — 

None 1 

16 Bad Bonding 

(a) Erroneous FID. --Loose Lead Bond in IC— 

None 1 

(b) Voltage Fai lure— Debonded Resistor Lead — 

None 1 

(c) Ch. A WDT2 Fai lure— Debonded Socket- 
Inspection 


Criticalit 


1 

1 


1 


1 


3 1 

1 

2 

1 

2 

1 

1 

1 

1 



1 

1 


1 


1 


FOOO CONTROLLER (CONTINUED) 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

17 

Corrosion 





(a) Solenoid Hold Voltage Low--Corroded 





Capacitor--New Cap 

1 

1 



(b) Pressurant Leak Rate High — Corroding 





Seals— OK, None 

1 


1 

18 

Voltage Error--Hardware Timing Condition— 





S/W Patch Delay 

1 


1 

19 

Oscillation 





(a) Miscompare Design Causes Osci 1 1 . — 





Ferrite Beads Added 

2 

1 

1 


(b) OPOV Oscillation 0 Hotf ire— Open 

1 

1 


20 

Capacitor 





(a) Voltage Dropped— Capacitor Short to 





Grid — None 

1 

1 



(b) A/D Conversion Fai lure— Defective Cap.— 





None 

1 


1 


(c) Compare FIDs — Capacitor Momentary Short — 





None 

1 

1 


21 

Pressure Miscompare— PR Bridge 2mV Offset- 





Put Cap. in Bridge 

1 


1 

22 

Pressure Sensor Fai lure— High Resistance 





Conductor Path-None 

1 

1 




265 

167 

“98 — 


F600 GSE CONTROLLER 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Two ICs bad— None Applicable 

1 

1 

2 

CADS Circuit Breaker Dropout, Other Equipment- 
Separate Power Supply 

1 

1 

3 

CAPS Halt— Improperly Seated Card— None 
Applicable 

1 

1 
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F800 FASCOS 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Cable/Wire 





(a) FID--Intermittent Coax Cable--Redesign 





and Change Installation 

1 


1 


(b) Chaffed Wires--Poor Surface Preparation 





and Routing--Repair 

1 


1 

2 

12V Power Supply Low--Defective Resistor— 





None, Isolated 

1 

1 


3 

Failed Propagation Delay Test— Capacitor 





Defect--X-Ray Caps 

1 


1 

4 

FIDs on Ch. 2— Short Circuit in Signal 





Cond. Module-Spec. Change 

1 


1 

5 

F IDs — Comb i ned Accelerometer and Mount 





Resonance— None, Redundancy 

10 

8 

2 

6 

Torque Anomaly— Defecti ve Tool ing— None, 





New Tools 

1 


1 

7 

Failed Stability Test— Fatigue Fracture 





Capacitors— Better Adhesive 

1 


1 

8 

Cont act s/Connec tors 





(a) Connector Failed Capacitance Test- 





Die Cracked @ Bonding— None 

1 


1 


(b) No Volts to Accelerometer— Poor Solder 





Joint— Personnel Alerted 

1 


1 


(c) Connector Min. Gap to Small— Drawing 





Problem— Change Drawing 

2 


2 

9 

Pressure 





(a) Internal Pressure Low— Solder Crack, 





Thermal Exp. --Change Material 

1 


1 


(b) Pressure Leak— Coax Connector Leak — 





Change Leak Requirements 

1 


1 

10 

Unknown Cause 





(a) Intermittent FIDs — Unknown — Personnel 





Alert 

4 


4 


(b) Receptacle Threads Dented— Unknown— 





None 

1 


1 

11 

Design— Erroneous Output When Power Off- 





Software Change 

1 

1 




29 

10 

""17 “2 


B-51 


GOOO IGNITER 


Fail. Failure Mode - Failure Cause - 

ID Recurrence Control 


Total Criticality 

No. 1 2 3 N 


1 

Ignitor Tip Cracks 





(a) Surface Cracks--Extended Service— OK, 





Normal 

3 

1 

2 


(b) Copper Tip Damage — Extended Service — 




Past Design Life 

1 

1 



(c) Output Failure— Suspect Physical 




Damage— None 

2 

2 


2 

Igniter Tip Erosion 





(a) Tip Erosion— Off Combustion, ASI 





Contamination— OK As Is 

13 

7 

6 


(b) Tip Erosion— Off Normal Combustion— 





None, Replace 

8 

8 


3 

No Spark— Contamination (ASI)— None OK As Is 

1 


1 

4 

Igniter Tip Melting— ASI Contamination— 
OK As Is 

1 


1 

5 

Insulator Crack 





(a) Cracked Ceramic — ASI Contamination — 





None, OK As Is 

11 

7 

4 


(b) Ceramic Flaking— Off Normal Combustion— 





Repair or Replace 

6 

6 



(c) Ceramic Fai lure— Spark Quenches — 





Add Criteria 

1 

1 


6 

Electric Connections 





(a) Output Voltage Off— Bad Connection — 





Isolated, None 

1 

1 



(b) Ch. B Igniter Malfunction — Inadequate 




Ground— Mfg. Process Change 
(c) Intermittent— Internal Ground Strap 

1 

1 



Not Attached— Mfg. Notified 

1 

1 


7 

Igniter Tip— Moisture 





(a) Spark Failure— Moisture on Tip— Drying 





Procedure 

2 

2 



(b) FID During Checkout— Moisture— None 

2 

2 


8 

Intermittent— Transformer Short, Void- 
Change Mfg. 

3 

3 


9 

Monitor Voltage High— Transistor Failed— 
None, Detectable 

1 

1 


10 

Igniter Tip Debonding— Plating Deficiency— 
Mfg. Improved 

1 

1 
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GOOO IGNITER (CONTINUED) 


Fail. Failure Mode - Failure Cause - To 

ID Recurrence Control N 


11 

Cause Unknown-Various 

(a) Erratic Output-Cause Unknown— None 

(b) Low Insulator Resistance— Suspect- 
Spec. Change 

2 

6 

1 

: i 

12 

Potting Void— Erratic Operation— Mfg. Process 
Change 

4 

i 

13 

Low Resistance Pin— F2 Filter Fai led— Change 
Cleaning Solvent 

2 

■ 

14 

Output Failure, Electrode Short-Off 
Combustion— None 

1 

■ 

15 

Quench Problem— Off Normal Combustion— None 

2 

76 

■ 

2 

62 14 m 
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HOOO, HOOl, H002 ELECTRICAL HARNESSES 


Fail* Failure Mode - Failure Cause 

ID Recurrence Control 


Total 

No. 


Criticality 
1 2 3 N 


1 Harness Braid Birdcaged — Handling Damage — 

Repair Procedure 17 

2 Ground Wire Lug Broken--Handl ing Damage — 

Heat Shrink Added 5 

3 Connectors 

(a) Connector Loose--0pen 1 

(b) Rust in Connector--Rain Water--None, 

Proc. Adequate 3 

(c) Connector Defective— Pin Hole 

Mi splacement— None, Isolated 1 

(d) Unlocked Connector— Unknown Cause- 

Remove Bout Requirement 1 

(e) Defective Connector— Particle Contam. 

Unknown— None 2 

(f) Connector Disengaged— Suspect Improper 

Torque— ECP 416 6 

(g) Connector Backshells Loose— Normal 

Condition— None 6 

(h) Loose Backshells — Handling Damage — 

New Design 7 

(i) Connector Disengaged— Unknown, FPL— 

New Design 3 

(j) Incorrect Connector Mating— Human Error- 

Person Alerted 1 

(k) Backshell Broken— Inadequate Cleaning — 

Techs Alerted 2 

(l) Loose Connector— Installation Error — 

New Instructions 2 

4 Pin Recessed— No Fai lure— None 2 

5 Wire 

(a) Broken @ Connector— Excessive Bending— 

Not Flight Conf. 1 

(b) Broken— Suspect Handling Damage— Alert 

Tech. 5 

6 Open/Short Circuit 

(a) Open Circuit— Handling Damage— Techs 

Alerted 2 

(b) Short Circuit/Insulator Sleeve and 

Leads— Open 1 


17 

4 1 

1 

3 

1 

1 

2 


6 


7 

2 1 
1 
2 
2 


2 


1 

1 4 


1 1 
1 





B-54 


HOOO, HOOl, H002 ELECTRICAL HARNESSES (CONTINUED) 


Fail. Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 2 3 N 


7 

Improper Harness Support--Support Require- 
ments Added 

1 

1 



■ 

1 

8 

Torque Lock 







(a) Debonded--Surface Contamination--None, 





■ 


Isolated Case 

1 


1 


■ 


(b) Missing— Defective Material--New 







Material 

2 


2 


■ 


(c) Missing Connector Loose-Inadequate 





1 


Torque-Increase Torque 

3 

1 

2 




(d) Torque Lock Debonded— Bad Surface 







Preparation— Spec. Change 

6 


6 


I 

9 

Birdcaged @ Connector 







(a) Birdcaged— Not Determined— None, Repair 

1 


1 


■ 


(b) Birdcaged— Handl ing Damage— None, Repair 

5 


4 

1 

1 

10 

Loss of Continuity — Handling Damage — Personnel 
Alerted 

2 

1 

1 


1 

11 

Retainer Ring 







(a) Broken— Stress Corrosion— No Functional 





■ 


Problem 

1 


1 


1 


(b) Retainer Cracked— Stress Corrosion — 







Redesign 

3 



3 

■ 

12 

Undetermined Problems 





1 


(a) FIDs @ Flight Readiness Test— Unknown — 







None Applicable 

2 

2 



■ 


(b) Noisy, Low Signal— Unknown— Field Signts 





1 


Notified 

2 


2 



13 

Insulation Low Resistance— Moisture in 
Connector— None 

1 


1 


1 

14 

Material/Elastomer Problems 





| 


(a) Material Moisture Contam.— New Supplier 

(b) Elastomer Abnormal— Humid Environment- 

1 


1 


1 


Spec. Change 

2 


2 


■ 


(c) Material Defective— Moisture Sensitivity- 





I 


New Packaging 

3 


3 


V 

15 

Broken Strain Relict Rope— Hardened by 
Epoxy— Mfg. Notified 

1 


1 

13 

1 



105 

“ ~l5 

77 
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J200 PRESSURE SENSORS 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Wire Fatigue (Vibrations) 

(a) Open Circuit— Wire Fatigue— Redesign 

3 

3 


(b) Output Failure— Gold Wire Fatigue- 
Redesign 

3 

3 


(c) Output Fai lure— Gold Wire Fatigue- 
Redesign ECP454 

18 

3 7 8 

2 

Wire Break 

(a) Sensor Output Fai lure— Wire Break- 
Terminal to be Welded 

1 

1 


(b) Sensor Output Fai lure— Wire Break- 
Inadequate Putting— Insp. 

2 

2 

3 

Output Fai lure—Thermal Induced Gold Wire 
Break — NASA Decision 

2 

2 

4 

Low Insulation Resistance— Shorted Diode— 
None, Detectable 

1 

1 

5 

Assembly Error 

(a) Connector Misaligned— Assembly Error- 
Inspection Added 

1 

1 


(b) Bent Pin — Handling Error— None Applicable 

2 

2 


(c) Error Band Deviation— Improperly Set 
Overload Screw — None 

1 

1 


(d) Output Fai lure— Assembly Defects— 
Document Revised 

1 

1 

6 

Output Fai lure—Thermal Induced Resistance 
Change—NASA Decision 

1 

1 

7 

Manufacturing Problem 

(a) Erroneous Output— Shop Aid Plug Not 
Removed— Suppl ier Caution 

1 

1 


(b) Input/Output Resistance Low— Supplier 
Data Oversight— Techs. 

1 

1 

8 

Thermal Problems— Miscellaneous 

(a) Zero Off set— Thermal Gradients— Improve 
Characteristics 

1 

1 


(b) Output Fai lure—Thermal Environment— 
NASA Decision 

1 

1 

9 

Open/Short Circuit 

(a) Open— Unknown, Suspect Hot Gas Leak— None 

1 

1 


(b) Short— Pin to Case— Documents Changed 

1 

1 


(c) Erratic Output— Open Circuit— Replace 

1 

1 
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J200 PRESSURE SENSORS (CONTINUED) 


Fail. Failure Mode - Failure Cause - T 

ID Recurrence Control 


10 

Undetermined Output Errors 

(a) Error Band Deviation— Unknown— None, 
Unit Compensated 

16 

16 


(b) Erroneous Output--Suspect Cold 
Environment--None 

1 

1 


(c) Bad Output-Unknown, Maybe Gold Wire- 
Redesign 

3 

2 


(d) Pressure Rise— Not Known, Suspect Ice- 
Drying and Purge Added 

1 

1 


(e) Sensor FIDs— Unknown — None 

1 

1 


(f) Output Drift — Unknown — None 

3 

3 


(g) Output Failure — Unknown — None 

2 

2 


(h) No Output on Flights, Low Input 
Capacitance — Unknown; Replace 

2 

2 


(i) Calibration Test Fai lure— Unknown- 
Sensor Redesign 

1 

1 


(j) Noisy or Hot Fire or Flight— Open 

2 

2 

11 

Internal Failure — Gold Wire Bond Parted None, 
Not Used Now 

1 

1 

12 

Welds 




(a) Output Fai lure--Weld Defect--None, 

Isolated 1 1 

(b) Bad Output — Link Pin Weld Cracks — Weld 

Inspection Added 3 3 


13 

Output 100 psi High— Overheated @ Hot Fire- 
Thermal Isolation 

1 

1 


14 

RC Error— Resistor Compartment Fai lure— None 

1 

1 


15 

FIDs During Shutdown— Coeff icient Error — 
Correct Coefficient 

1 


1 

16 

Thermal Block Cracked— Instal led Under Stress — 
QA Advised 

1 

1 




84 

4 70 

16 
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J300 TEMPERATURE SENSORS 


Fail. Failure Mode - Failure Cause - 

ID Recurrence Control 


Total Criticality 

No. 1 2 3 N 


1 Sensor Tip Erosion--Suspect Contamination- 

Improved Cleaning 1 

2 Sensor Tip Broken/Damage 

(a) Tip Broken — Hot Gas Flow Impact — 

Redesign Pending 4 

(b) Tip Bent-Over Temp. --None Applicable 1 

(c) Erroneous Output— Flow Debris Impact- 

Shield Added 7 

(d) Tip Broken — High Flow Velocity — Probe 

Retracted 1 

(e) Sensor Tip Broken— Vibration, Fatigue- 

Redesign 4 

(f) Erratic Output— High Cycle Fatigue- 

Check Added 1 

3 Output Problem— Unknown Cause 

(a) Erratic Output— Unknown— None 15 

(b) Output Failure, Cracks in Pressure Seal — 

Unknown — Redesign 1 

(c) Erroneous Output— Open 1 

4 Open/Short Circuit (Miscellaneous) 

(a) Open Circuit— Handl ing Damage— Personnel 

Alerted 1 

(b) Open Circuit— Suspect Debris Impact— 

None 1 

(c) Erroneous Output— Open 1 

5 Open/Short Circuit (Miscellaneous) 

(a) Open Circuit— Handling Damage— Personnel 

Alerted 1 

(b) Open Circuit— Suspect Debris Impact— None 1 

(c) Short to Case @ Test— Overheat— Techs 

Alerted 1 

(d) Off Scale Output— Circuit Not Isolated- 

Redesign 4 

(e) Short Circuit— Open 1 

6 Erratic Output— Braze Joint Defects— Check 

Added 3 

7 Insulation 

(a) Open Circuit— Fatigue, Sheathing Contam.— 

Redesign 4 

(b) Low Insulation Resistance— Moisture— None 3 

(c) Low Insulation Resistance— Overheating— 

None 5 

(d) Isolation Insulation Test Failure— Open 1 


1 


1 3 
1 

2 5 
1 

4 

1 

1 12 2 

1 

1 

1 

1 

1 

1 

1 

1 


4 

1 

3 


4 
3 

5 
1 
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J300 TEMPERATURE SENSORS (CONTINUED) 


Fail. Failure Mode - Failure Cause - Total Criticality 

ID Recurrence Control No. 1 2 3 N 


8 Wire Break 

(a) Open Circuit-Wire Break--Redesign 1 

(b) Performance Shift, Wire Break— Flow 

Debris— None 2 

(c) Erratic Output— Wire Break, Fabrication— 

Mfg. Procedure Change 2 

(d) Open Circuit, Element Wire Break— Handl ing 

Damage— Techs. Alerted 2 

(e) Output Failure, Element Wire Break, 

Assembly— Assembly Change 2 

(f) Erratic Output— Wire Break— Design 

Investigation 1 

9 Electrical Connector Damage— Unknown— None, 

Repair 1 

10 Miscellaneous Handling Damage 

(a) Resistance Off— Handl ing Damage — Techs 

Alerted 1 

(b) Ground Short— Handl ing Damage— Persons 

Alerted 1 

(c) Skin Temp. Erroneous— Handl ing Damage — 

Repair 1 

11 Missing Receptacle Insert — Requirement Not 

Defined—Add Requirements 3 

12 Sensor Debonding 

(a) Improper Epoxy Cure— Epoxy, Instructions 1 

(b) Handling Damage/Inadequate Bond— None, 

Repair 26 

13 Coax Cable 

(a) Electrical Leak to Case— Cable Crack— 

None 2 

(b) Output Failure— Coax Fracture— Assembly 

Procedure Change 2 

14 Moisture 

(a) Noisy— Moisture Contamination— None 1 

(b) Resistance Test Failed— Moisture, 

Fabrication— Assembly Change 1 


113 


1 

2 

2 

1 1 
2 
1 

1 

1 

1 

1 

3 

1 

26 

2 

1 1 
1 

_1 __ 

15 96 2 
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J600 FLOW/SPEED PICKUP 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

Criticality 


No. 

1 2 

3 

N 

1 

Low Insulation Resistance-Wire Insulation 
Damage/Fabrication— None, Detectable 

2 


2 


2 

Speed Sensor Tip Contact Housing-Dimension 
Error— Change Drug 

1 



1 

3 

Broken Wire— Suspect Thermal Induced— Thermal 
Test Revised 

1 


1 


4 

Miscellaneous Output Failure 






(a) Output Fai lure— Unknown— None 

(b) Output Failure — Suspect Thermal Shock — 

4 


4 



Test Change 

1 


1 



(c) Erratic Output— Suspect Sensor Nut 





Var i at ions— E valuation 

1 


1 


5 

Open Circuit, Encapsulment Cracks— Assembly- 
Assembly Change 

2 

2 



6 

Open Circuit— Cracked Epoxy — Assembly Change 

1 


1 



13 

— — 

10 

T 


J800 ACCELEROMETER 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Accelerometer Debonded— Not Detrimental— None 

2 

2 

2 

Noisy Accel .--Accel . and Mount Resonance — 
None, Redundant 

2 

2 

3 

Dielectric Insert Missing— Cause Unknown— None 

1 

1 

4 

High Readings 

(a) High Amplitude Output— Unknown— None 

1 

1 


(b) Off Scale Spikes (STS7 ) — Fai lure Could 
Not be Reproduced— None 

_! 

_ 1 


7 5 2 


B-60 


K100 FUEL LINE DUCT 


Fail. 

Failure Mode - Failure Cause - 

Total 

Criticality 

ID 

Recurrence Control 

No. 

1 2 3 N 

1 

Bellows Flex Joint 




(a) Collapsed During DVS Test--Leakage @ 




Weld — New Design 

2 

2 


(b) Frost Formed--Handling Damage— None, 




Repair 

1 

1 


(c) Frost Formed on Bellows--Bond Seal, 




RTV Cure--Specif ication Change 

1 

1 


(d) Spring Rate High--Excessive Epoxy— None 

(e) Exp. Joint Boot Torn— Cause Unknown— None, 

1 

1 


Repair 

1 

1 


(f) Frost on Bel lows— Open 

1 

1 

2 

Rust in LPFT Discharge Duct— Open 

2 

2 

3 

Fuel/Seal Leak 




(a) Fuel Leak — Cause Unknown— None Applicable 

1 

1 


(b) Seal Leak — Defective Seal — None Required 

1 

1 


(c) Leak (? Joint F4.2 — Open 

1 

1 

4 

Nickel Insulation Plating 




(a) Damaged— Handl i ng— Improve Procedure 

1 

1 


(b) Cracked— Inadequate Repair— New Specs. 

2 

2 


(c) Cracked— Unknown Cause— OK 

(d) Damaged— By People in Area— Test 

1 

1 


Personnel Advised 

2 

2 


(e) Insulation Damage— Open 

1 

1 

5 

Contamination 




(a) Contamination— Source Unknown— None, 




Clean 

5 

5 


(b) Contamination— Human Error, Shop Debris — 




Advise Techs 

11 

10 1 

6 

Flange Insert 




(a) Backed Out— Key Not Fully Engaged- 




Procedure OK 

1 

1 


(b) Damaged— Incorrect Branching of Slots— 




Planning Change 

1 

1 


(c) Key Not Flush— Suspect Tolerance Buildup— 




None, OK 

1 

1 

7 

Joint Holes Damaged— Repeated Use— Improve 
Product 

1 

1 

8 

Pinhole Leaks in Flow Meter— Carburization — 
Redesign 

1 

1 


B-61 


K100 FUEL LINE DUCT (CONTINUED) 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 


Criticalitv 
1 2 3 N 

9 

Dimension Errors 

(a) Orifice Size Error-Inspection Error — 
Planning Improved 

1 

1 


(b) Seal and Groove Misfit — Groove 
Undesize— Managers Notified 

1 

1 


(c) Joint Misal ign— Tolerance Stackup — 
Revise Report 

2 

2 


(d) Flange ID Undersize— Blend Oper. 
Omitted— Add Blend Oper. 

1 

1 

10 

Burst Diaphragm Broke— Handling and 
Vibration — None 

10 

10 

11 

Accel. Debonded— Improper Adhesive Prep. — 
Advise Tech. 

1 

1 

12 

Duct Cracks—Were Not Detected— Revise NOT 
Drawings 

1 

1 

13 

Seals 

(a) Seal Groove Edge Damage— Bad Installation- 
Persons Alerted 

1 

1 


(b) Cut and Chatter Marks— Machining— None 

1 

1 


(c) Tolerance Problem— Rework— Acceptable 

1 

1 


(d) Discoloration and Pitting — High Humidity 
and Salt — None — Polish 

4 

4 

14 

Nuts/Screws 

(a) Nuts Yielded— Increasing Stresses— None 
Required 

1 

1 


(b) Sheared Screwhead— Impact, Unknown— None 

1 

1 

15 

Joints— Overmold 

(a) Split in Overmold— Ice, Thawing— Test 
Stand Notified 

1 

1 


(b) Debonded— Improper Adhesive— Change 
Adhesive 

3 

3 


(c) Overmold Raised— Not to Print— Use 
Silicone Tape 

4 

4 


(d) Missing— Accidental Impact— Person 
Cautioned 

1 

1 

16 

Cracks in Weld— Improper Technique— Train 
Welder 

2 

2 

17 

Excessive Copper Plate— Planning Change 

1 

1 
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K100 FUEL LINE DUCT (CONTINUED) 


Fail. 


Failure Mode - Failure Cause - 

Total 

IwSuSBh 

ID 


Recurrence Control 

No. 



18 

F/M 






(a) 

High Fuel Indication--F/M Constant Bad- 
Change 

1 


1 


(b) 

F/M Calib. Bad— Synchronous Wake Pulse- 
Redesign 

1 


1 


(c) 

F/M Calib. Const. Low — Fuel Prediction 
Error — Conduct Tests 

1 

1 





81 

1 

~79 


1 
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K200 OXIDIZER LINE DUCT 


I 

I 

I 

E 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

T 

Criticality 
2 3 N 

1 

Duct Cracks 





(a) Failure, Pressure Test— Seam Weld 





Crack— Develop Detection Method 

1 

1 



(b) Crack @ Weld Ft. 7 — Inspector 





Inattentive — Improve Inspect. 

1 


1 


(c) Possible Crack— Open 

1 


1 


(d) Leak/Crack @ Weld 14— Open 

1 


1 

2 

Duct— Damage 





(a) Nicks on ID Surface — Debris Impact — 





None OK 

1 


1 


(b) Worn Spot— Handl ing Damage — None 

1 


1 

3 

Duct Leaks 





(a) High Leakage— Unknown Cause — None, OK 

1 


1 

4 

Installation Error/Misfit 





(a) Port @ Joint 9.1 Off Drilled Incorrect 





Hole — Advise Person 

2 


2 


(b) Crack 0 Support Link— Flex Joint 





Backwards — Repair 

1 


1 


(c) Seal Groove Tolerance— Inspection Alerted 

1 


1 

5 

Contamination 





(a) Weld Debris in Duct Joint— Procedure— OK 





As Is 

3 


3 


(b) Contamination Throughout— Unknown- 





Cleanliness 

12 


12 


(c) Metal Inside Joint— Bolts Stripped None, 





Replace Bolts 

1 


1 


(d) Tape- on Flange— Improper Use of Lox 





Tape— Change Process 

1 


1 


(e) Brown Residue— Open 

1 


1 


(f) Metal Sliver in Seal Groove— Measure 





Error— Alert 

1 


1 

6 

Bulge in 039 Tube— Local Explosion— c/o 





Sequence Change 

1 


1 

7 

Impression Marks on Ring— Improper 





Instal lation— Alert 

1 


1 



32 

“I 

3l 







B-64 


K300 DRAIN LINE 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

2 

Line Damage 

(a) Damaged Drain Manifold--Repeated Removal 




HPOT — Replace 

(b) Gouges on Flange--Dropped in Assembly— 

1 

1 

4 

No Further Action 
Misalignment 

(a) Drain Line to PCA Improper Handling 

1 

1 


Procedures Clarified 

1 

1 


(b) Misalign Joint— Unknown Cause— Inspect 

1 

1 

5 

Contamination @ Joint— Sample Too Small— None 

1 

5 

1 

5 


K400 HYDRAULIC LINE 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 


|| 

3 

Line Leak 

(a) Leak @ Joint 1/16 — Elastomer Damage— 
OK As Is 

1 

1 


(b) Hydraulic Leak @ Joint H-l— Relax of 
Torque— None, OK 

1 

1 

4 

Joint Misal igned— Exchange of Nozzle— None, OK 

1 

1 



3 

3 




B-65 


K500 PNEUMATIC HOSE/LINE 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

2 

Damaged Line 

(a) Kink, Bent or Twisted — Improper Handling- 
Procedure Change 

3 

3 


(b) One Compressed— Installation Error- 
Person Cautioned 

1 

1 

4 

Misaligned Joint— Cause Unknown — Inspection 

1 

1 

5 

Contamination 




(a) Joint and Seal Contamination — Source 
Unknown— None 

2 

2 


(b) Residue in Joints — Dry Lube Residue 
Mfg. Alerted 

2 

_ 1 



9 




K500 PNEUMATIC HOSE/LINE 



Fai 1 . 

Failure Mode - Failure Cause - 

Total 

Criticality 

ID 

Recurrence Control 

No. 

1 2 3 N 

1 

Duct Cracks 

(a) Cracks— Improper Installation- 
Personnel Alerted 

3 

3 


(b) Side Panels Cracked— Open 

1 

1 

5 

Coolant Holes Plugged, Debris— Nozzle 
Removal— Non-Flight Problem 

1 

1 


5 

5 



B-66 


LOOO STATIC SEAL 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Seal Damage 

(a) Seal Sliver in Joint— Assembly Mistake- 
Personnel Alerted 

1 

1 


(b) Seal Surface Blistered— Cause Unknown— 
None 

2 

2 


(c) Chatter Marks— Turbine Housing Moved 
Radial ly — None 

2 

2 


(d) Damage-Seal Came Loose— Revised 
RF004-146 

1 

1 


(e) Protrusion on Seal— Open 

2 

2 

2 

Contamination in Seal Groove — Mfg. Error— 
Improve Inspection 

1 

1 

3 

Tolerance Problems 

(a) Kel F Dimension Smal 1— Measurement 
Error— Planning Change 

1 

1 


(b) Discrepent Dimensions— Material 
Characteristics— Drawing Revised 

1 

1 


(c) Seal Diameter Out of Toler. --Unknown 
Cause— None 

2 

2 


(d) Seal Oversized— Drawing Error- 
Correct Drawing 

1 

1 


(e) Seal Size Anomaly— Improper ID— 
Vendor Alerted 

1 

1 


(f) Seal Undersized When Cryogenic- 
Calculated Wrong— Planning Change 

1 

1 

4 

Low Leak Rate— Heat Marks on Sealant — 
None Needed 

2 

_ 2 



18 
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1 

I 
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I 
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B-67 


L2O0 STRETCH BOLTS 


Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Bolt Preload Error 

(a) Studs Not Stretched — Assembly Error- 
Procedure Change 

1 

1 


(b) Damaged Bolts on Removal— Preload 
Error— None 

1 

1 


(c) Bolt Found Loose— Overload at 
Installation— None 

1 

1 

2 

Bolt Damage 

(a) Nicked— While Slotting HGM— Person 
Alerted, Superficial 

1 

1 


(b) Broken Bolt— Suspect Excessive Torque — 
NSTL Alerted 

1 

1 

3 

Stud Keys 

(a) Piece of Key Missing — Improper 
Installation-Persons Alerted 

1 

1 


(c) Keys Protrude— Improper Installation- 
Persons Alerted 

1 

1 



7 

7 


L300 LEAKAGE— JOINT 

Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
T 2 3 N 

1 

Joint Leaks— Scratches, Unknown Cause— Alert 

4 

4 

4 

4 



B-68 


MOOO GIMBAL 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Fretting & Galling 

(a) On Block and Body-Vibrations— None 

5 

5 


(b) Wear, Interference Condition— 
Eliminate Interf. 

1 

1 

2 

Bushing Cracks--Low Ductility Material — 
New Purchasing 

3 

3 


9 

9 


N100 INTERCONNECT HARDWARE 

Fail . 
ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Missing Locking Cl ip--Removed for Test— 
Reinstalled 

3 

3 

3 

3 


N200 THERMAL PROTECTION 


Fail. 

ID 

Failure Mode - Failure Cause - 
Recurrence Control 

Total 

No. 

Criticality 
1 2 3 N 

1 

Insulation Separation--Appl ication Technique— 
None, Repair 

4 

4 

2 

Insulation Debond — Improper Cleaning — Eliminate 
Tools 

_1 

_ 1 




1 

I 


B-69 


N400 POGO ACCUMULATOR 



1 Cracks 

(a) Cracks in Welds— No Failure— MRD091051, 

None 1 i 

(b) Crack in Baffle— Gas Pure Defect— None, 

Inspect OK 11 

(c) Cracks in Slotted Wall— Open _1 _ 1 

3 3 



N600 ORIFICES — ASI , LEE JET 




Fail . 
ID 


Failure Mode - Failure Cause - 
Recurrence Control 



1 Orifice Deformed—Open 


3 


3 


2 Tolerance Problems 

(a) Orifice Not Per Print— Rework Wrong — 

Personnel Alerted 1 1 

(b) Lee Jet Pin Not to Print— Installation — 

Alert 1 1 


3 


Low Torque Value— Instal lation Lee Jet Error- 
Alert 


1 

6 


1 

6 
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APPENDIX C 
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UCR REVIEW 

List of High Occurrence/Criticality Failure 
Types by Component 
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Comp. Time Period (Months) 

A-200 1980 1981 1982 1983 Criticality Description - Cause 

ailure 1-6 7-l2 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 
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♦Criticality N UCRs are Included in the distribution for the time periods shown. 



MAIN INJECTOR (Continued) 
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Comp. Time Period (Months) 

A-200 1980 _ _ 1981 1982 1983 Criticality Description - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 



18 Metal contaminants-secondary 
failure-unknown sources- 
none 


MAIN COMBUSTION CHAMBER 


I 


C-6 









• 



O 








1 

S- 

CD 


J= 

1 


1 




-C 

id 

-0 id 

C 


1 

a> 


QJ CO 


to 


CD 

c 

<u »— 

O 

XJ 


TJ 


i- *“H 


1 CD 


•r* <D 

■r- 

c 

c 

id 

u 



3 

• 

to »— 


JC C 

E 

O CD 

1 

JZ 

<d >> 

•“O 

<u 

4 -> O 

r— 

(U 0 


1 O 

id 

•r- 


1 

$- -0 

to 0) 

to 

Q.f — 4 

r— ■ 

•r- _C 


r- C 

4-3 

*- to 

id 

JX. 

0 3 

^ TD 

3 

3 O 

id 

4 -> 



c 

4 -> f— 

E 

CJ 

4 -> 

U CD 

id 

J- < 

4 -> 

•»“ 4-3 


Id <D 

0 

<0 <u 

W 

id 

<D tO 

Id CD 

0 c 


to 

u c 


2 <J 

u 

(U c 

O 

u 

C 

s- c 

»— 


c 

id id 


c 

1 

u c 

c 

0 

-f- t. 

0 

l 0 

^ (-) 

•r- 

r— f— 


to id 

c 

1 id 

1 

03 

r— CD 

to 

1 \ 

ic 33 


3 O 


id 4 -> 

0 

to JZ 

to 

>> C 

L. -O 

1— id 

c 

<U 

o> 

CD O 


to 

•p— 

0 


4-3 •»- 

a> c 

0 ) 

O ^ 

r- m- 

3 

a> 0 



to 

0 1 

O 

• 1 - c 

4-3 3 

c s- 

#r " O 

<L> 

r— 

i- 1 


4 -> 40 

0 

id to 

id 

> - 1 - 

C 1 

C -f- 

1 J W 

Q. 

.r- <u 

r rv' 

E S- 

Cl O) 

s- • 


O < D 

u 

u •— 

u 

id x: 

CD 4 -> 

id id 

CD l 

CD 

•r- J. 


.C U 

a> 

<J 0 ) 

0 

u 0 

U C 

JC Cl 

iC • 

V- c 

O 



c 


id 

a > 

0 


V- Q. 

a) id 

r- 4 -> 


c 5 

r— 

r- C 


^ E 

•- E 

u 

U 

-c E 

clx: 

1 — to 


•f- O 


r- Id 



*— <U 

4-3 1 

CO 

a QJ 

0 0 

Id *r* 



id 

id x: 

id 

id -0 

Id 03 

c c 

CD 

10 4 -> 

J- 

5 T 3 


to t^_ 

2 <u 

* O 

S 

5 r- 

* c 

id 0 

O 

•r— 

O- CD 


-0 

4 -> 

c 



<D 

•t— 

r— 


■D C 

E C 

to r— 

0 ) 

O 4 -> 

to 0 

tO 4 -> 

to 

to ^ 

to Q. 

O 4-3 


•r— 

1 - -r- 

<d 10 

cn 

d C 

id c 

id c 

id 

id 

id E 

O id 


4-3 

1 c 

CD E 

s- 

to 10 

CD 1 

03 id 

CD 

CD C 

03 *r- 

0 c 


10 a) 

c 

u 

id 

r— 

c 

r— 


3 C 


•r- 


S- to 

id id 

4 -> <D 

r— - 

4-3 O 

4 -> O 

4 -> O 

+-> 

4-3 O 

4-3 tO 

O E 


3 •«“ 

a) 1 — 

O -C 

c 

O O 

0 -r- 

O O 

0 

0 u 

O Id 

c_> id 


03 s- 

—1 Cl 

31 4 -> 

a> 

x 0 

X 4-3 

X O 

X 

X U 

X CD 

z *“ 

>Joo 


CM 

un 


CM 

CM 

ID 

CD 

rH 

no 

r-H 



ICVJ 


no 

oo 

CD 


i 

|r^ 


i 


co 


c 

o 

2: 


I 

1 ^ 


“O 

o 

•r- 

S- 

<l> 

o. 

Q) 


|u ? 


|CM 


00 

cd 


1 


|VD 

I 


cm 


00 


CM 


CM 


CO 


[CM 


O 

00 

o> 


I 




CO 


CD 

• o u 

Q.CO =5 

1 * 7.7 

O < id 


O <0 

«-h CM 


U 

CM 


TD 

CM 


id 

00 


u 

CO 


“D 

00 


id 


-Q 


MCC coolant channel cracks- 
Inherent-none or open 



MAIN COMBUSTION CHAMBER (Continued) 


C -7 


CD 

tD 

3 

id 

c 

I ° 

*8 

Q) 

2ri 

U 

CJ 

id 

CD 

O 


>Jno 


U 

CJ 


PO 

00 

CD 


CM 


c 

o 

2: 


■§ 




: CO 
CD 


o 

00 

CD 


C\j 


I 


vo 


CM 


I 

r-^ 


!u ? 


i 

r^. 




loo 


I 

tr^ 


vo 

i 


CD 

• O L- 
Q.P0 3 
gOO^ 

O I •*- 

O <C id 


3 

CO 


c 

o 


*0 

c 

>> 
E “D 
id 3 
»— -*-> 
QJ to 
“D I 
CD 
C 


s- 

<d 


o 
c c 

•i- i 

r- a; 

4-* 

O rd 

CJ r- 

2E; a. 


to 


E 

o 


c 

0 a> 

•r- C 
+-> •»- 
<d c 

C *r- 

•*- -C 

E (J 

id id 

81 

1 LU 
4-> I 

L- >> 
o o 

CLf- 

■o <t3 

a> 

cd a> 

CD N 

3 Id 

»— u 

Cl. JO 


C\J 


>) 


-O 

Id rH 
•I- 00 

•“ CD 

W S 

O LU 
O 

CL CD 
I C 
<d *r- 

CD CD 

<d c 

I* 

-o >> 


U “D 

o o 

a- E 


00 


CD 

“O CL 

O -M 

4- 

•r* • 

C 4-> 
id c 
E O 
U 

4-> in 

L- *r- 
O "O 
Cl i 

o. • 

3 S- 
in cl 
QJ 
CD S~ 
> 

*•“ T3 

L- r— 

-D a> 

• I 
-Q 

s- id 

3 CD 


U 

CL 

u 


CM 


Q_ 

O 


u 

+-> 

id 

E 

ID 


ID 

XJ 

1 


CD 


C 

id 

o 

o 

c-> 


■O 

CD 


ID 

id 

o> 


I vo 
c vo 

O 

f- vn 

ID «-H 

o o 
s- c 

CD 

a: 

>>o 


Cu 

O 

I 

c 

u 

§ 


> 

0 ) 


I 

CD 

c 

o 

s- 

* 

X3 

0 ) 


tD 

C 


U 

CD 

*<0 

I 

c 

o 


L- 

XJ 

id 


vo CD 

00 ^ 


id 

vo 


a> 

■o 


§ 

§ 

u 


•r— 

> • 
Id 4- 

CJ 

• 

CD (D 

c c 

•r- *r* 

c 

o 

•f 


c 

o 

a> 

<J CD 

>> 

L- CD 

•M 


4-» 

c 


(D 

C 

id 


id 

o 

CJ 1 

(D 

U QJ 

c 

CD 

c 

c 

•r— • 

id 

CD 

•r 

C 

•f— 

1 

4-> CD 


c >> 

E 

c 

E 

CD 

ID C 

-*-> 

•»- 14- 

id 

o 

id 

c 

3 

3 

id •»- 

+-> 

ID 

4-> 

•r 

O Q. 

S- 

+-> T3 

c 

J- 

C 

CD 

U E 

4-> 

CD O 

o 

CD 

o 

C 

<t •*- 

DO 

a: E 

o 

O. 

CJ 

CD 

CM 

f-H 

i 

CM 


iH 



JO 

vo 


o 

VO 


Contamination-unknown source- 
ongoing program 


C-8 




1 XJ 













CO DO 



QJ 







QJ 



QJ £ 


CO 

N 


1 


QJ 

i 





X u 


“O 

CO 


D> 

E 

<B> DO 

c 


X 



3 


•r— 

U 

CO 

C 

X 

C 

o 


3 



P • 

CO 

o 

X 

QJ 

•r- 

X 

C CO 

•r— 


o 

a) 



t- 

> 


X 

r— 

QJ 

•f~ X 

to 


XJ 

in 


QJ OJ 

•r- 


p 

co 3 

XJ 

C 

co U 

o 


1 

3 


f— CO 

CO 

od 

u oo 

C P 

C 

OJ D> 

s- 

u 


QJ 

<o 


N 

X 


qj ro 

•r- 

<0 

P *r~ 

P c 

u 


P 

o 

c 

N U— 

QJ 

CO 

i- r-t 

CO i— 

X 

co CO 

40 o 

o 


CO 


o 

O P 

U 

XJ 

J- ro 

J- 

CO 

3 QJ 

•r- 

o 


3 

1 

•n 

c o 


C 

O 1 

P co 

•r— 

CTXJ 

C P 



cr 


4_> 

P 

<✓> 

O XJ 

U Q 

CO 5 

E >> 

OJ 

O CO 



QJ 

c 

3 

C P 

3 

xt aj 

C O 


1 U 

XJ QJ 

•r- U 

CO 

LU 

XJ 

o 


•i- 3 

O 

T? 

*- i 

•— U 

co ro 

CO DO 

P -r~ 

c 

X 

co 

•r— 

o 

U 

•r- 

OJ C 

1 00 

cO QJ 

-X co 

C C 

CO t- 

t- 

o 

c 

P 

to 

CO 1 

> 

rsi a) 

oo 

U .X 

CO 40 

*r- CO 

U X 

QJ QJ 



CL 

qj 

-X p 

QJ W 

yj E 

QJ 

o o 

QJ QJ 

1 X 

QJ cO 

P DO 

to 

1 

•r— 

O' 

*0 (0 

V t- 

S- co 

X CM 

*1— 

r— U 

40 O 

XP 

c c 

QJ 

40 



0 ) a) 

Cl CO 

X 

3 «-» 

1 X 

QJ 

QJ 1 

O 1 

1- CO 

X 

XJ 

u 


i— x 

X 

i 

P 

CO p 

CO C 

U C 

1 40 

1 X 

3 

1- 

CO 


t- 

E oj 

CO t-H 

• 

-X 

.X 

3 Do 

to XJ 

40 U 

P 

o 

oj 


•> QJ 

o u 

-x o 

C P 

u ^ 

u CO 

p v- 

-X C 



> *D 

o 


CO > 

u 

CO 1 

•r— QJ 

CO r~ 

cO CO 

X CO 

CO O 

CO DO 

C 

OJ 



QJ O 

p ^ 

qj r-v 

u 

U CO 

s- 

3 QJ 

QJ X 

QJ C 

T- 

D>r— 



U 

40 

i— o 

CO 1 

o E 

o u 

S- “D 


r— •»— 


C r— 



3 <— 

CO QJ 

to 

-* >) 

U 

•r- 


QJ 

C 

40 

•»— cO 



P <0 

-X X) 

QJ rH 

u o 

QJ QJ 

QJ CO 

QJ XJ 

QJ N 

QJ C 

_X 

CM P 



CL U 

CO 3 

X 

CO i— 

X X 

X X 

X C 

X CO 

X CO 

CO 

CO 40 



3 O 

0J P 


S- •— 

3 P 

3 QJ 

3 O 

3 U 

3 *“ 

QJ 

L. c 



a: •— 

— J > — 

P X 

O CO 

P ^ 

P U 

P X 

P X 

P X 

P 

CO *»” 

>, 

no 

ID 


IT) 

ro 

iH 

CM 

CM 

ro 

to 



4-> 




iH 


'O' 



ro 




•*“ 













fO 













O 

CM 

i 

i 

[ 

i-H 

i 

1 

1 

1 

i 

1 

l 

i 

•r— 





* 

1 

1 

1 

i 

1 

1 

i 


>- 

I 

CO 


on 

on 

<c 


hsi 

rvi 

o 


s- 

c_> 


XJ 

o 

•r- 

t- 

QJ 

X 

OJ 


CM 


I 

r^. 


|VD 

I 


cm 


tO 

l 


CM 


I 


tO 

I 


CM 


I 


\o 

I 


QJ 

• o t- 

X*T 3 
E rO r- 

O I •*— 

u<t »0 


UD 


tO 


00 


CM 


00 VO 


re 

CM 


cr> 


to 


ro 


to 


JO 

CM 


to 


O i-H 


CM 


00 


* 

u 

CM 


cn 


x> 

CM 


00 


0) 

CM 


CM 


DJ 

CM 


CM 


CM 


CM 


CM 


CO 


c 

§ 


to 

X3 

O 

QJ 

x 

QJ 


Q> 


u 

o 


s- 

p 

00 

X3 

<D 


"D 

0) 

XJ 


u 

c 


QJ 

u 


CO 

a: 

o 


co 

u 


u 

o 

♦ 


NOZZLE ASSEMBLY (Continued) 


C -9 


a> 

i n 
3 
<d 

° c 
• ° 

o 2 

£8 

•p- OJ 

u 

O' I 

a> 


l- 

o 


>Jro 


tp 

o 


a> 


CVJ 


I 

r*^ 


vo 

i 


i 


tO 

I 


c\j 


i 


tO 

» 


C\J 


I 


|v£> 

I 


<D 


_ CO r— 
O I *r- 

u < >o 


id 

E 

u 

<D 


I 

00 

<v 

X> 

3 

+-> aj 

c 

4 - o 
o c 

I 

c c 
o o 


id s- 
l- o 

id 4 J 
CL 00 
<D *r- 
00 -D 


-Q 


00 

3 

O 

•r 

> 

<D 

L- 

CL 

E 

o 

u 


on 

0 ) 

-Q 


0) 

•r> 

c 


a> 

t- 

3 


o 

0) 
c c 
o o 

•r- C 
4 -> I 
Id L- 
t- 

Id Id 

a. Cl 

<D <D 

00 W 


id 

E 

W 

a> 

-C 


> 

i 

"D 


4- U r— 


>> id 
L- Q. 
id a> 
TP l. 
C I 


I 


id 

u 

TP 


00 

a> 

tp 

<v 

s- 

I 


o 


c £ 

<D QJ 
-C 
O 4-> 


•— X> c& 


O <D 

4- <L> 

cn • 

U 

C 

TP J3 

a) id 

c o 

r— -f— 

00 fc. 

id c 

<u > 

1 JO 

E i 

3: 1 

on 

00 

• 

<D +J 

• TP 

+-> 

X) oo 

4-> Id 

O 

3 O 

4- O 

CL L- 

1* CL 

< r- 

00 JQ 

iH 

d 



C\j 


csj no 


> 

i 

0 ) 

o 

u 

X) 

on 

TP 

r— 

ft! 

3 TP 
<D 

-M TP 

<u a> 
^ a; 
u c 

id 

U oo 
-O id 

a> u 

r“ *r- 

n id 

N Cl 
O QJ 
Z V- 


I 

00 

tp 

1 
0 > 


O' 

<D 

TP 

id 

c 


00 

tp 


i 

XP 

•r- 

> 

I 

TP 


<U 

J* 

o 

id 

u 

00 


-a 

oo 

o> 

4-> 

a> 

TP 

U 

“a 

TP 

ft! 

1 >> 

id 

3 

4- 

i 

TP 

-M 

*3 t- 
r— U 

a> -m 

0) 

a> a> 

r— Q) 

r— 

5 Cl 

T» ^ 

<D 

4-> 00 

id o 

i- C 

O 1 

4- Id 

4- O 

CL O 


u 

oo .O 
TP 

r- a) 

0 J 4 -> 


c 

■M I 
QJ 00 
TP 
u id 

id o 

l. f— 


to 


N 




00 


U 3 
3 O 
TP W 


ft! 


4-> *r- 

X) 

>>T3 



a> E 

o3 

•— <U 


Ll. OO 


c 

Q. t- 

-i-> 

O CL 

CJ r- 

w c 

0.4- 

o 

•r* 

id a> 

o o 

3 f- 

CL 

C f— 

U l 

-C -r- 

cn a 

00 

a; o 

-O 00 

i- 00 

<L> 

0) 


TP 

a> c 

i— a. 

OO c 

O TP 

oo Id 

<u Id 

a> oo 

CL. O 

L- TP 

CL. o 

4-i S- 

3 C 

H- C 

GG Id 

h- r- 

00 -*-> 

Ll. 3 

iH 

CVJ 

oo 


cn 


co 


X> O T> 0> 4- _ 

^TVOvOtOvOvOtOvOvD 



NOZZLE ASSEMBLY (Continued) 


I 


C -10 


QJ 

l/) 

3 

id 

° c 
■ .2 

o % 
*8 

u 

V) 

CD 


>Joo 


CVI 




|CVJ 


oo 

CD 

On 


I 

1 ^ 


|vO 

I 


l 

|r^ 


"O 

o 

•r- 

W 

0 > 

Q- 

OJ 


,u ? 


ICVJ 


CD 
C T> 


I 




|C\j 


o 

CO 

On 


I 

|r^ 


|Uj, 


qj 

♦ O U 
CL*T O 
E CO r- 

O I * r ~ 

O < <C 


I 

on 

QJ 

V 

3 


id 


E 

0 
“O 

c 

id 

S- 

1 

<v 

_X 

o 

i- 

X 

on 

QJ 

to 

O Q- 
C L QJ 
OO L- 


CVJ 


C\J 


-X 

VO 


I 

E 

O 

u 

c 


I 


> 

I 

QJ L- 
U *r- 
3 id 
r— Q- 

•»- (L> 

<d u 


CVJ 


J 


id 

E 

QJ 


I 

C 

o 


id 

u 


-O 


I 

id 

u 

o 

•r 

t- 

QJ 

+-> 

QJ 

TD 


I 

O 

U 

J- 

o 

o 

on 

on 

QJ 


I 

to 

c 

id 

s- 

+■> 

i 

id 

QJ 


i 

cn 


On 


TJ L- 
C -o 


CVJ 


CVJ 


VO T-H 1 -H 


id 

OY 


* 

JO 

on 


■O c 
c o 


1 

C 

C 

QJ 

u 

id 

id c 

OJ 

QJ 

L- •*- 

v- cn 

-X -r- 

X * 

-O 1 

H-> 

-X 

OJ 

OJ c 

o id 

c 

c 

QJ 

O 

u 

+-> id 

id CL 

-*-> o 

4 -> o 

1 i — 

W 

3 >> 

3 x 

L- OJ 

Id *r 

Id *r- 

CL 

CD 

O U 

o u 

o w 

DC 

X to 


1 ^ 

CO 

iH 

CVJ 

1 

r-H 


u 

on 


id qj 
u u 
-o I 
on 
• 4 -> 

■O c 

>> QJ 


Oi 


On 


*o 

on 


cr 

QJ 

"O 

id 

c 

•r- 

i 

“O 



4-> 

id 

QJ C 

r— 


"O 

QJ QJ 


1 

4- 

l- -r- 

- QJ 


c 

^ On 


to 

1 

Q. id 

4-> Cn 

on 

id 

C 


-X 

-X 

1 On 

id c 

i 

X 

T? id 

z 


o 

tj id 

E id 

to 


»— X 

LU 

id xj 

id 

c 

x: 

QJ 

■M 

o u 

Q_ 

S- OJ 

*- 

id “o 

QJ O 


id 

u 

O 

O -x 

o 

X QJ 

JO 

O 

X c 

1 c 


L. 


U 

3 On 

X 

on 

-X on 

on 

+-> O 


-M •»- 

+-> C 

c 

oa f- 

id •»“ 

“O 

QJ J 

QJ • 

id id 

•f— 

T— 

on 

qj on 

r— 

-X QJ 

-X X 

-C CL 

oa j 

CL 

C QJ 

r— QJ 

QJ 

U W 

u id 

QJ 

id 

v 

•f- "O 

T3 


T 3 I 
C CD 
Id 31 
X 

E 

«*■> CL 
Id X 
31 QJ 


CVJ 


QJ 

on 


id 

J- 

+-> 

to 

i 

-X 

id qj 
QJ cn 
i— c 

id 

“O x 
»— u 
o 


c id 

id *4- 

E i 
\ QJ 
+■> N 
M- Id 
id w 
X 

■o 

c <S> 

id 

X) -X 

u 

+-> id 
id u 
31 U 


CVJ r-H 


On 


t 


♦Criticality N UCRs are included in the distribution for the time periods shown. 


NOZZLE ASSEMBLY (Continued) 


C-ll 




X) 



o0 


on 





1 



CD 





X 





(0 



C 



S- 


<0 


1 



c 



o 



•i— 


O 


U 


0“ 

•r- 



•r- 



<o 




QJ 


• 

E 



■M 

1 


CL 




4-> 

>> 

VO 

<0 



•*“ 

c 


QJ 


c 

E 

C 



4-> 

QJ 


on 

o 


L- 

z 

o 

O 

•r— • 

-Q 

O0 

c 

(✓) 


O 



1 

LkJ 

•r* 

i- 

1 u 

E 


o 

3 


Cl 

4-> 


on 

CL 

-L> QJ 

4- 

QJ CL 


vO 

o 

*0 



*0 


X 

o 

<0 on 


on Qj 

on 

Ll. 

1 

LJ 

c 

+-> 

c 


to 


U C 

• 

o u 

on 


i_ x 


o 

E 



O 

X 

(0 

4-» 

O 1 

10 

4-» 

O OJ 

1 

•r— 


E 



QJ 

U £ 

**- QJ 

r* i— 

i 

C 

on x 


4-> 


r0 

>n 

1 

+-> 

-Q U 

on c 

10 

X 

•r— 

C QJ 

C 

3 

to 

4-> 

L 

c 

4- 

10 

O O 

• E 

QJ 

o 

QJ QJ 

o 


QJ 

C 

to 

QJ 

•r- 

4- C 

CL C 

QJ U 

C 


on c 


O 

vo 

o 

on 


-C 

1 CD 

QJ 1 

on QJ 

CD 



-4-> 

on 

1 

o 

on 

O 

on 

QJ *r— 

X QJ 

<0 -C 

•#— 

4-> 

• on 

O. 

CD 

JX. 

1 

QJ 

u 


O) on 

U 

E -M 

r— r— 

10 

Q. (0 

*r— 


to 

X 

(J 

-Q 


to QJ 

C L. 

«0 

«0 O 


E 

V— 


QJ 

QJ 

QJ 


oo 

E X 

O 3 

X * 

in o 

4-> 

0) QJ 

u 




C 


CL 

<0 1 

•»- O 

•M 

+-> 

C 

+-> u 




CJ 


QJ 

J— 

X CD 

4-> on 

c •*- 

E 

QJ 

(0 

QJ 



o 

on 


>— «" 

C 

*0 

O 4- 

J 

E 

Q) r— 

O 


1—1 


*0 

u c 


f“ *r- 

c »— 

•r 

qj 

C 

> CL 



u_ 

-O 


<0 CD 

L-> 

•f— »— 

•»- to 

4-> QJ 

c 

on 

•f— QJ 





u 

L **“ 

QJ 

O X 

E C 

(0 O 

i 

•i— 

+•> L- 



+■> QJ 

on 


JO on 

-X 

4- C 

to C- 

f— C 

4-* U 


O 1 



C C 

QJ 

r0 

QJ 

O 

to 

+-> QJ 

3 QJ 

c o 

10 Z 

QJ C 



•r- O 

-Q 

O. 

on x 

*0 

on ^ 

C 4-> 

on u 

•t- u 

on LJ 

4- O 



O C 

3 

QJ 

CL QJ 

w 

CL 

O X 

C QJ 

o u 

-r- Q_ 

QJ -r- 



O l 

1 — 

fc. 

I— t- 

00 

h- 00 

O QJ 

*-• 4- 

X QJ 

2 : o 

O 4-> 

>J 

1^ 

CM 

»— ( 



CM 

on 

0- 


OO 

rH 

CM 


U 

o 


CM 


X 

0 
•*— 
S- 
QJ 
CL 

1 


[CM 


I 


[43 

I 




\ 


40 


CM 


I 

|r^ 


vo 

i 


CM 


I 

r-v 


vo 

i 


QJ 

• o u 

3 

E 00 
O I •*- 
u< <d 


CM 


CM 


CM 


CM 


OO 


■K 

O 


on 


fO 

GO 


-O 

oo on 

«— ■ CM 


O 

lO 


CM 


«0 

oo 

CM 


-O 

00 

CM 


CM 


<0 

VO 


.o 

VO 


on 

on 

X 

o 

T 

QJ 

CL 


qj 


u 

o 


c 

o 


u 

4 -» 

on 

•T" 

x 

qj 


X 

QJ 

X 

3 

O 

c 


QJ 

J- 

<0 

(/) 

a: 

o 


10 

u 


c- 

o 

♦ 


Debonded temp, sensor-handling- 
repair as needed 



Corap. Time Period (Months) 
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Comp. Time Period (Months) 

A-600 _ 1980 1981 1982 1983 Criticality Description - Cause 
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Comp. Time Period (Months) 

A-600 1980 ~ 1981 ~ 1982 1983 Criticality Description - Cause 
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Comp. Time Period (Months) 

D120 1980 1981 1982 1983 Criticality Description - Cause 

Failure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 
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Comp . Time Period (Months) 

D500 1980 1981 1982 1983 Criticality Description - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 


C-42 


u 



a> 



a 



to 



c 



•r* 



1 

X 



OJ 



c 


c 

•r— 


ai 

E 

c 

CL 

U 

01 

o 

cu 

o. 

i 

4J 

o 

* 

01 

1 

o 

X 

f-g 

r— 


• 



^r 

01 

o 

CM 

S- 

c 

O 

3 



CO 

d) 

-*-» 

40 

u 

L- 

01 

i- 

o 

i- 

3 

CL 

Q- 

o 



40 

<2j 

>> 

l 





a. 

<0 

to 

Q- 

O) 

CD 

3 

— 1 


00 


,-h 

iH 


CM 


o 


o 

»— H 

c 


o 

cn 


CJ 

LU 

Gd 



r— 

• 





E 




cO 

U 



01 

4-> 

01 

-4-> 


40 

(O 

<M 

o 


3 

c 

Ol 

c 


to 

•r 

X 

1 


o <- 



4-> 


L- 

E 

4-> 

•t— 


J ° 

•f— 

o 

40 

c 

•r- 

JZ 

c 

O 

01 

c tf 

40 X 

1 

CL 

CL 

o _E! 

t a> 

• 

01 

O 


* «M 

E 

X 

1 

Cl * 

QJ 

o s. 

c0 

01 

s- 

•— 01 

-M 

•— c 

CO 

l“— 

C 

CO O 

01 


01 to 

o 

•«- c 

:* 

u 

CD 

o 

L- i 


40 

to • 


01 X 

CD 

01 

4-> CD 

4-> 

4-> Ol 

c 

a 

r— 44- 

u 

CO C 

•r— 


O E 

•r- 

E •- 

S- 


> 1 

r— 

E 



&- 

r— 

C L. 

01 


h- O 

cO 

* 01 

CD 


£3 S- 

4-> 

o ^-> 

X 


> W 

01 

U 01 

01 


— » 01 

s: 

CD X 


>Joo 


rH 

r*H 

r-H 


u 

o 


eg 


c 

o 

z: 


X 

0 

•I— 

fc. 

a> 

a. 

01 


eg 


i 


VO 

I 


CM 


I 

i r s ** 


IUD 


eg 


I 


i 


leg 


IVD 


01 

s- 


^ o 
o a td 


01 

c 

0 
c 

1 


<d 

CM 


CO 

no 


-Q 

CO 


MAIN VALVE ACTUATOR 


C-43 




4. 

X 

X 

c 

•r- 

>> 

i- 

QJ 

1 

c 




*0 

QJ 

U 

X 


o 





U 

1 

o 

• 


T mm 

QJ 


+-> 

3 

o 

CL 

Or 

+J 

03 

to 


o 

X 


Q) 

4- 

03 

E 

3 


c 

C X 

QJ 


E 

c 

c 

<o 



•r— QJ 

> 

QJ 

1 

•r— 

QJ 

o 

c 

X 

X 

•r- 


+J 

E 

.C 


o 

•r— 

X) 

4-> 

<0 QJ 

4- 

(0 

+J 

1 

•f— 

X 

u «d 

O 

3 or 

•r- 


1 


4-> 


3 

QJ 

O’ C 

U 

C 

QJ 

c 

3 


-O C 

4- 

QJ <0 

X 

o 

U Ov 

o 


X 

1 O 

a> 

X? -C 

QJ 

u 

3 OO 

•r— 

o 

o 

^ «r- 

x 

<0 (J 

CL C 

1 

r— p*^ 

■*-> 

to 

a. qj 

10 -M 

i 

C 

3 O 

s. 

o 

cl 

QJ 

QJ X> 

QJ U 

.x 

•r— • 

-X c 

o 

10 iH 

•r- 

cc 

1 c 

i— QJ 

*0 

1 u 


v. 

4- O 



-X 03 

Q- 

QJ 

-X QJ 

o * 

u 


O 


<0 -C 

i— c/> 


03 O. 

f— QJ 

QJ 

£ 

</> 


QJ u 

<0 C 


QJ tO 



u q: 

QJ 



QJ *r- 

+-> 

r— | 

u S 

QJ 

o 

O 


to 

to | 

S- 

QJ 

•r- 03 

+-> 

t- 3) 



to 

-c 

o 

>) CD 

r— 4-> 

03 

^ I 



(0 QJ 

u u 

CL 

<0 03 

3 U 

S- 

to QJ 



5 l> 

•t- 4-> 


5 V- 

03 OJ 


O DO 



a; o 

4-> f0 

4-» C 

QJ QJ 

J- 4-> 

2 QJ 

> 03 



u u 

03 S- 

C (U 

S- > 

X QJ 

QJ C 

U B 



•r- CL 

4-> U 

QJ CL 

•1- o 

>>X 

r— O 

QJ (0 



2 1 

DO to 

> o 

3 U 

3: i 

to c 

to X 

H 

loo 

oo 

«— < 

CM 

CM 

uo 

CM 

1 


<0 

u 


CM 




|Cm 


oo 

oo 

cr> 


\ 


I 


ICVJ 


I 

1^ 


X 

o 

•r— 

V- 

QJ 

Q- 

CD 

B 


|vo 

I 


ICVJ 


I 

|r^ 


IvO 

I 


|CVi 


o 

CD 

CJ> 


I 


ho 


0) 

• »-• L 
0.0 3 

i ° •” 

O I *r- 
uuj ic 


qj 

j- 

qj 


i 

CT> 


o 

s- 


OO 


-O QJ *4- or 


C\J 


»— * CM «-H 


CM m 


i 


PREBURNER VALVE ACTUATOR 


C-44 






1 


* 


i 

I 





x> 


-C 


CD 

0) 




TD 

CD 


u 


ISt 

U 




m f~ 

44 


44 

c •— 

3 

3 




"O 

44 


10 

O CD 

cd 

f— 44 





•r- 


V- CO 

c 

u 

•r- S- 


0) 


44 

g 


O CD 

c c 


tO CD 


oo 


c a> 

o 


o o> 

o o 

c 

4- f— 


3 





c 

•1— </> 

5 

<d 


<d 


■— c 

cx> 


CD id 

44 t- 

o 

4-> 1 


o 

c 

CO (0 

c 


CJ -C 

(d CD 

c 

CO “D 



o 

0) -C 

•r— 


«C U 

C CL 

-X 

CD CD 


1 


CO <J 

V- 


4- 

•r- 

c 

4-> E 



4-J 


1 


j- c 

E 44 

3 

U 


c 

3 

>0 i/> 

o 


3 O 

<0 V. 


CD O 


o 


X CO 

i *o 

z 

<A »r- 

44 CD 

cnx> 

O 4- 


•r- 

o 

O CD 

-x a) 

UJ 

1 +-> 

C «— 

C CD 

C CD 


+-> 

CO 

Q. U 

rO 4~> 

Q. 

4* U 

O id 

•r- 44 

CD TJ 


Q. 

<U 

CD O 

CD i- 

O 

*0 CD 

U 1 

+-> S- 

3 



CxZ 

1 l- 

r- CD 

1 

CD Cl 

c 

4-* CD 

0*44 


L- 


-X Cl 

r“ 

-X 

r— CO 

r- ^ 

•r- r— 

CD O 


U 


<0 1 

-C «o 

id 

C 

•f o 

CL <d 

CO f— 


CO 


CD CD 

u 

CD 

r— *r— 

o c 




CD 


r- j_ 

-*-> r— 

r— 

lO 1 

-X 

4-> i— 

u 


o 


1 CD 

■*“ CD 


CD OO 

CD C 

S- a) 

*r— O) 




>>-c 

3 C 

>) 

co C 

C 3 

o c 

44 C 




<0 *u 

CO c 

id 

•r— 

O 1 

CL C 

Id t- CD 




5 fO 

o o 

3 

44 f— 

U 4-> 

o 

E W i- 




CD 

> CO 

CD 

4- -O 

M- 

4-> C0 

3 CD CL 




V- 4-> 

s- l. 

i- 

id c 

•— <d 

c u 

CD 44 O 




•*- o 

CD CD 

•f— 

SZ to 

f- JC 

CD CD 

C CD CD 




3: c 

CO Q. 


00 -C 

OO CO 

> CL 

Q- E a 


>: 

OO 

VO 

pH 


f-H 

f-H 

f-H 

f-H 


4-> 










•r— 










f— 










t d 










u 

CM 

i 

i 

1 

1 

ft 

1 

1 

1 

1 


•r* 



1 

1 

1 

1 

1 

1 


44 










•r~ 










$- 










O 

r-H 

i 

i 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 



CM 










1 







t-H 


oo 

1 









00 










cn 










f—H 

VO 




















CM 








co 


r-H 




f— H 




-C 

44 

CM 

1 

r^v 








c 

CX) 









o 

oo 









z: 

« — f 





















LD 








“O 

o 


i 

«—H 





f— H 

f-H 


•f— 




















cd 

a- 


C\J 
1 — 1 








CD 

t-H 

1 








E 

oo 

r- 








•i— 











t— * 

VO 










i 










r-H 










CM 










f-H 


f-H 







o 

00 

1 

1^ 









OO 










1PH 

VO 

I 










1 










CD 









U 

3 

u 

~o 

CD 

4- 




E 

o 



pH 

f-H 

f-H 


CD 

ID 

O 

1 

•n 








ULU 

ra 








II 


u. 










MAIN FUEL VALVE ACTUATOR 


C-45 


qj 

OO 


3 

C 

CL 

•r- OO 

w 

+-> CT> 

id 

<-> c 

T> 

c 

o 

c c 

•r 

c c 
QJ id 

. o 

•i“ QJ 


CD L- 

U -C 


"O CD 

4-> QJ 

C 

•r* (J 


C 
>o cd 

V- f— 
■»• id 

•i- CL 
S- 3 

4- 

4- QJ 

o ^ 

X -C 

"D 1 

1 -X 

3 U 

•r o 

O L> 

l E 

o u 

OO 3 


CL 

^ QJ 

1 10 

C X3 

QJ 

QJ 00 

rd i— 

-x X) 

•r- QJ 

T oc 

1 OO 

QJ JH 

id 

1 U 

U ““ 

^ QJ 

*“ o 

QJ £ 

-X o 

L) 

id u 

s- 

f— GJ 

id l. 

00 

OJ o 

QJ Q. 

c 

QJ CL 

QJ 

•— s- 

> 

4J 1 



>Joo 


id 

u 


6 


l<M 


CO 

CO 

CD 


I 


|v£> 

I 


ICvJ 


I 


“O 

o 

•r- 

QJ 

CL 

QJ 


|LD 

I 


ICVJ 


00 

O' 


I 


|y ? 




O 

CO 

oo 


i 

1^ 


,y ? 


<u 

• o l- 

0.-H 3 

§7£ 

u uj <d 


I QJ 

cd c 
c c 

*r- O 
U oo 
I U 
O QJ 


2 

"S 


>> l 
flS Qj 

5 C- 
QJ QJ 
L- -C 
•i- "D 

3 <C 


CM 


> -O 

o E 

> 0J 
C- to 
QJ (✓> 

tO C0 


L- «M 

o c 

Cl Qj 

E 

-M QJ 
C > 
QJ O 
> E 


CM 


QJ 


>o 

X 

o 

CL 

QJ 


QJ 
>0 CD 
CO C0 
* ^ 
QJ QJ 
t- > 
IT o 
3 U 


to 


CM 


CM 


a. 

o 

i 

c0 

QJ 


S- 

o 

CL 


c 

QJ 

> 


CM 


CD 


CD 

c 

C 

o 

•r 

•r— 

r— 

4-> 

X> 

id 

c 

r— 

id 

3 

-C 

OO 

i 

c -o 

QJ 

•r QJ 

CD 

1 -M 

Id “O 

O U 

E QJ 

•r— QJ 

id 4-> 

4-> r— 

-o V. 

id id 

QJ 

s- 

«*-> i— 

W oo 

qj Id 

QJ C 


Cl 

O 

I 

<v. 


id 

QJ 


CM 


J* 

C to 
id c 

r- (O 
-Q *r- 
U 
U •!- 
QJ C 
4-> -C 
id u 
QJ QJ 


CM 


id 

CM 


o 

-C oo 

a u 

4-> QJ 
•r- CL 

5 » 
oo aj 
O CD 
> id 
fc- E 
QJ id 

to X> 


id 

ro 


LU 

to 

1 

CL 

in 

c 

O 

m 


1 

CD 

o 

QJ 

fH 

c 

S- 

o 

-X 

3 

<1 

c 

r- 


3 

•r- 

oc 

1 

id 

o 

>> 

4- 

13 

-M 


1 

f— 

4-> 

c 

> 

00 

o 

id 

QJ 

•r 

u 

4-> 




id 

4-> 

■M 

c 

4- 

3 

1— 

id 

O 

E 

-C 


id 

oo 

CL 

4J 


O 

c 

c 

u 

o 

•r— 

XJ 

u 


1 


QJ 

c 

4-» 


o 

(J 

U 


QJ 

•r* 

r-— 

CL 

+-> QJ 

r— 

OO 

U C 

3 

3 

id o 

CL 

00 

CL. c 

( 

*— 1 

rH 


-Q 

oo 


to 


Position indicator failure-OPEN 



MAIN FUEL VALVE ACTUATOR (Continued) 


C-46 


I 





-P 


<d 







u 





o 

1 

3 





X 

CD 

r-— 





on 

> 

•»— 

CD 





t— 

id 

4-> 




i— 

<d 

4- 

id 


CD 


•r 

> 


u 


i/o 


o 


-P> 

-r- 


3 


u cd 

o 

00 

s- 


id 


i on 

> 

CD 

X 


o 


a> c 

X3 

-P> 

id 



Q 

on id 

cd a) 


4- 


» 


c X 

00 4 -> 

cd 

“O 



4 J 

o u 

s- 

u 

On CD 


c 

3 

Cl 

(2> CD 

c 

C -P> 


o 


on cd 

r— 

id 

•r- U 


•r— 

Q 

CD L- 

on id 

E 

00 (D 


-P> 

(/) 

S- 3 

c 

U 

3 


Q. 

<D 

X) 

•r— • 

o 

O id 



ry' 

5 CD 

«P> 00 

4— 

X 


L- 


o o 

-P> X 

U 

1 • 


U 


<- o 

<D U 

cd 

CD 00 


oo 


on U 

^ CD 

CL 

oox 


a» 


Cl 

-P> 


id u 


o 


L 1 

r— | 

<L> 

E CD 




O -P> 

•r- >-> 

4- 

id -m 




-P *r- 

O r- 

id 

X> 1 




10 3 

id 

</> 

u 




3 O 

• E 

f— z 

r- O 




-P U 

-O o 

•f- UJ 

Id u 




u •«- 

>> C 

Id CL 

CD U 




< O 

x Id 

Ll. o 

oo CD 


>i 

on 

1 

r-H 

f— H 

r-H 


+-> 


1 





•»— 







f— 







id 







u 

C\J 

i-H 

1 

1 

1 

1 


•r— 



1 

1 

1 


4~> 







•»— 







u 


1 





o 

r-H 

f 

1 

1 

1 

1 

1 

1 



CNJ 










r-H 



oo 

r^ 






00 







On 







r-H 

oo 

i 


r-H 












C\J 





00 


’ ( 





x 

-P> 

C\J 

i 





C 

00 






o 

On 






z: 

r-H 















oO 





“D 

O 


I 




r-H 

•f— 







u 







CD 

O- 


oo 




f-H 

QJ 

r-H 

1 





E 

00 






•r— 

On 






h- 

r-H 

OO 














c\j 







«— * 

r-H 





O 

00 

i 






On 







rH 

oo 







r-H 







cd 





• 

o 

s- 





§■£ 

3 

CJ 

VO 

00 

o 

* 

r-H 

O 

1 

•i— 



rH 

r-H 

O UJ 

cd 







U- 






C 

5 

o 

x 

oo 

00 

X3 

o 

•r— 

S- 

CD 

CL 

CD 


CD 


o 


c 

o 


3 

XI 


oo 

•f— 

“D 

CD 


"O 

CD 

-o 

3 

O 

c 


cd 

u 

m 


o 

=5 


id 

u 


s- 

C_) 

+ 


MAIN OXIDIZER VALVE ACTUATOR 


C-47 



0> 






C 




1 


o 


i 


“O 


c 

1 

on 


QJ 


I 


QJ 


C 


c 

<ts 

-C 


•f— 


5 

a> 

(J 


E 

QJ 

o 

r— 

4-J 


i. 

on 

c 


03 

U V) 

QJ 

3 

-ac 

T3 

$- 

O -r- 

4-> 


c 

0> 

U 

+-> on 

QJ 

° c 

3 

L> 

on 

« >) 

XJ 

o 


3 


3 i— 

c 

1 -r- 

o> 

"O 

X3 

+-> 03 

3 

_ xj 

o 

c 

OJ QJ 

U C 

1 

5 3 

J- 

•r- 

U C 

03 03 

C 

O r. 

3 


3 O 


QJ 

t: o 

O 

• 

“O c 

O on 



on 

E 

C 1 

+-> c 

O 



f0 

• 1 - c 


t. 

T 

•* 

4-> 


cr>T3 

-O 


• 

C 

• o 

c c 


u 

E 

o 

E C 

•r- 0) 

+J 

u> 

03 

u 

03 

on Q_ 

• 3 

QJ 

4-> 


*<-> C 

3 1 

C 

Q 

C 

r— 

C 3 

o t- 



o 

*r— 

O 

SZ QJ 

>) 


<J 

o 

O <U 

“O 

03 


1 

c 

I u 

• c 

* 



• 03 

t- 

J* *r- 

QJ QJ 


03 

-O QJ 

03 3 

03 r— 

U C 


Q) 

>)*“ 

Q) O 

(D >, 

*r- O 


-» 

in u 

— J on 

-J U 

3 c 


OJ 

• O U 
Q.CSJ 3 

8" 

Ulii 10 



FUEL PREBURNER OXIDIZER VALVE ACTUATOR 


C-48 





E-150 CC VALVE ACTUATOR 


C-49 



CD 

C 

c 

0 

cd 

U 

cd 

CL 

1 

c 

3 : 

O 

c 

c 

3 

CD 

(J 

w 

3 

O 

in 


• -o 
E <D 
fT3 +J 
4-> i- 

c <d 

o 

O H5 


I 

I 


I 

I 


X5 

C\J 


I 

•r» 

E 

U 

CD C 
-4-> CD 


CD in 


CD a> 

L- X) 
3 CD 


CL L- 


I 

C 4-> 

O -r- 
XJ -C 
+-> 1/) 


J= CD 
CD C 


S- 
CD I 
O O 
CL I 
C 

>> o 


co 


I 

I 


^r 


CO 


l 

CD 

c 

o 

c 


c 

3 

•r— 

O 

CD 


C 


CD 

CD 

1 

O 

X) 

c 

(D 

to 

X) 

4-> 

0) 

<n 

CD 

♦r* 

U CD 

CD 

X c 

CD CD 

0) o 

i- CD 

c 

*5 

+J 1 

C CJ 

•*- -X 

O 

E (J 

*r- X5 

•r- *0 

-*-> a; 

i— -Q 

<0 -*-> 

-C 

*— rO 

H“ CD 

3 *— 

O (0 

CD O 

> r- 

C CD 

QC H- 

H-4 «r-> 


I «H 

I 



C 

1 

CD 

c 

CL 

*0 

O 

S- 


4-> 

r— 



«*-> 

o 

U 

u 

CD 


CL 

o 

CD 

> XJ 

3 

U CD 

CD 

CD -M 

1 

CD t0 

O <D 

1 r- 

H-. c 

c o 

U- o 

O CD 

c 

•#— *r 

U 1 


o • 

O * 

U E 

C CD 

C- iO 

3 C 

CD -M 

*4- O 

C 

»— c 

c o 

<d i 

o u 

E +•> 

•r- 

•r- 

«M -*-> 

O 3 

C 

> (J 

CD <D 

u u 

O *r- 

CD 

Q- CD 

OO <J 

1 

rH 


I 


I «“H I 

I I 


I I I 

I I I 


<0 u 

^ ^ m co 


"D 

x> 

to 


I 

I 


I 

I 




Comp. Time Period (Months) 

F-000 1980 1981 1982 1983 Criticality Description - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 


C-50 


<D 

> 




1 







i 


•r 


+-> 






>1 

-X 

CD 

t/> 


o 



07 



X 

id 

i-H 

c 

J- 

3 



c 




07 

jr 

07 

o 

S- 

“O 

1 

o 


-O 

X7 

&- 

1 

to 

4-> 

+-> 


■a 

c 


07 

07 

X 

X> 

1 07 

CO 

CO 

id 

u 

1 

•> 

(J 

U 


07 

■M c 

•r— 

C 07 

o 

id 

07 

07 

c 

3 

07 

4-> 

•p- o 

l/l <D 

•r- C 

X 

u 

u 

u 

id 

-M 

u 

V- 

3 C 

c c 

o 



•n 

•f— 

X 

U 

•f— 

o 

U I 

id o 

X C 

s- 

cn 

5 

2 

c 

id 

3: >> 

X 

u • 

c 

•r— \ 

07 




07 

J- 

id 

07 

•r- a. 

+-> 1 

-X "O 

Cl 


C 

c • 

» 

4- 

o V- 

i- 

u E 

l to 

to w 

O 


07 

07 CT> 

c 


> i 


07 

c •>- 

<0 

U 


.X 

JX 4- 

o 

07 

U X 

07 

+-> 4-> 

5 CO 

07 O 

X 

CO 

O 

O E 

♦n 

J- 

07 

S- 

J- 

O co 

-l-> X 

E 


u 

U 

4-> 

•r- 

to • 

3 07 

o • 

“D 03 

3 

•r* 

CD 

X 

X 4-> 

id 


07 

p— c 

x cn 

+-> X 

(J -M 

1 

VO 07 

1 

1 i- 


1 

07 CD 

f— o 

t/i +-> 

3 O 

QJ *f“ 

h- 07 

LU f— 

4-7 

4-> 07 

3 

V. 

4- C 

id c 

r~~ 

X 

X 3 

-J C 

' X 

»r— 

•r r— 

to 

O 07 

Id id 

4- | 

^ o 

to o 

07 O 

X o 

i •»“ 

3 

3 Id 

c c 

J- c 

to X 

07 

o > 

•4-> 

U 

-1" C 

+ CO 

U 

O 1 

•*- o 

s- o 

«— (J 

> -X 


V) 

O *r- 

00 1 

»— to 

s- 

s- o> 

•r- 

07 C 

•r 

U- O 

to X 


O 

V oi 

id o 


•*- C 

"D 4-> 

1 

id cn 

z: u 

•r- cn 

Cl. 07 


a- c 

X X 

o 

O T- 

07 O 

>>-x 

4- C 

X 

l/l *r- 

<£ +-> 

CO 07 

•r- 



r— 

cn o) 

4-» U 

•1" 

CD 

C X 

S- 

f“ to 

< -M 

CD 07 

c 

C -D 

id x 

•r- O 

id »— 

07 

ie 

• o 

•1- O 

id 

c 

07 

07 C 

E co 

U ^ 

> o 

• u 

s- o 

X X 

<d O 

X 07 

X o 

X 

x Id 

id c 

Id 07 

o o 

X 1- 

h- +-> 

CJ CO 

U- 1— 

O CO 

o c 

O 

O X 

O *r- 

X u 

3E -*-> 

o 5 

[ 

l 

l 

1 

1 

1 

I 

1 

1 

1 

CVJ 

j 

CVJ 

1 

1 

CO 

CO 






cn 

rH 


d- 

CVJ 

CVJ 


I 

I 


I 

I 


r— ( 


CO 


eg 


id 

CVJ 


X 

CVJ 


o> 

CVJ 


id 

00 


X 

00 


07 

oo 


4- 0> -p- 

oo OO OO 



Comp. Time Period (Months) 

F-000 1980 1981 1982 1983 Criticality Description - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 


C-51 


QJ 




o 

QJ 




c 






•r— 



QJ 

i c 



• 


x o 



E 

3 

CO *r— 

X 


fd 

r- 07 

QJ X 

QJ 

QJ 

X 

c 

X 3 

5 

C 

c 

cd o 

fd 

O 

o 

O QJ 

x c 

OJ u 

X 

c 

U 1 — 

i 

O 1 

1 

1 

1 X) 

QJ • 

c • 

5 “C 

X 

£ 03 

W E 

fd »— 

fd qj 

•r- 

O U 

3 fd 

X 3 

x > 

3 

r “ *'“■ 

CO “O 

Q. CO 

X 5 O 

U 


CO 

OJ C 

E 

u 

x cx 

QJ QJ 

0 ) •*- 

X QJ 


=3 CL 

u u 

OJ 

OJ 0 - 

u 

Q. 03 

CL-r- 

<d * 



4 -> 


QJ 

O QJ 

c 

3 qj 

• 

■D U 

CL S- 

OJ 

o c 

X i- 

OJ •*- 

•r— 

Cl 

o 

U CL 

r- 5 

OJ ^ 

o 

aj c 

CO 

•r— 

> 1 

1 

0 - l 

“O 

03 "D 

■*- “D 

OJ 

•r; a; 

O QJ 

X OJ 

CO Q) 

c 

5 cn 

X 

X 

CO x 

3 

fd 

*— co 

CQ X 

Q) (J 


QO E 

O *r- 

=3 O 

oj c 

•r— 

\ 03 

cx s 

QJ X 

X *f“ 

fd 

nr -o 

— 1 X 

O CO 

LiJ CL 

X 

i 

1 

l—l 

»— t 

1 


1 




QJ 


CO 




CO 


•f— 

X 



CO 


CO 

U 

X 

>> 

OJ 


CO 

o 

w 

X 

U 


fd 

X 

o 

QJ 

X 


X 

CO 

X 

X 0- 

CO 


u 


to 

L- 3 

u 



i- 


O TJ 

QJ 


o 

QJ 

T3 

X QJ 

> 

C 

X 

X 

QJ 

CO U 

O 

*r- 


U 

CO 

1 O 


X 

X 

QJ 

3 

>> U 

#* 


•r- 

> 

fd 

X CL 

X 

C 

3 

C 

u 

O 

•f— 

OJ 

O 

•r- 

i 

E XJ 

3 

-X 

u 


• 

QJ X 

U 

o 

•r— 

X 

E 

E fd 

s- 

0- OJ 

oj 

QJ 

fd 

l 

•r— 

X c 


X 

x 

“O CO 

QJ 

t o 

X 

1 

c 

03 Or 


CD C 

J- 

Q) 

o 

O C 

C 

C 1 

o 

X 

u 

r— »r~ 

QJ 

•r— v 

X 

3 

1 

CL 

X 

-o 0- 

CO 

r— 

X 

O CL 

O 

fd o 

1 

*f— 

\ 

X *f“ 

1 

QJ X 

QJ 

03 

X 

r— 

QJ QJ 

i- QJ 

S- 

X 


QJ U 

l- C 

OJ 

3 


00 

r— 

3 O 

o. c 

r— QJ 

CQ 


X OJ 

«— C 

o c 

•*- C 

=3 

• 

fd o. 

•f- 1 

0 - o 

id o 

OJ 

X 

C *r- 

03 QJ 

Q_ QJ 

Ll. C 

o 

QJ 

zd 5 

Ll. •— « 

UJ w- 

CM 

1 

1 

f— <i 

»— ♦ 

r — i 


I I 


r— H 


t 


CM 


I 

I 


r- E O 

m ro oo co 


fd xi 


OJ X? QJ CD 

kt 


X 

in 


X 

CO 


Ch. B temp, calib. low voltage- 
no ise-none 


Comp. Time Period (Months) 

F-000 1980 1981 1982 1983 Criticality Description - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 


C-52 







i 

1 





CJ 






CD 

CT 





a 

c 




1 

C 

C 





i 

5 




• 

•r— 

*<— 





CD 

o 



1 

> 

u 

P 

CD 


1 


cn 

c 


z 

*3 

a> 

•r- 

•f— 

P 

XJ 

p 

•» 

c 

X 


LU 

CD 

i 

5 

* 

•r— 

a) 

CL 

CD 

id 

c 


CX 

«P 





p— 

3 

C 

u 

3 


o 

<J 

to 



to 

r— 

P 

o 


1 


1 

CD 


X 

p 

•r— 

<d 

P 

c 

4 - 

to 


CO 

-P 


O 

o 

E 

«p 

a> 

1 

O 

E 


E 

CD 


5 

5 

l 

CO r— 

P z 

CL 

CD 

d> 


CD 

-O CD 


CD 

CD 

CD 

C CD 

C LU 

E 

-P C 

r— 



c c 

r— 

U 

P 

P 

•r— C 

•r- Q_ 

<d 

3 O 

JO 


-D 

3 O 

CL 



3 

C 

o 


O C 

o 


O 

c 

CL 

P 

•P 

r— 

P o 

o3 1 

CL 

1 

L 


L 

CJ 1 

3 

U 

CJ 

•r— 

P to 

-P 

O 

• CL 

CL 


CL 

' "D 

to (D 

CD 

CD 

rd CD 

id p 

CD C 


to E 




CL. (0 

C 

X 

P 

4- C 

CL CD 

P •*- 

“O 

CD id 

r "“ 


r - 

CD 

to o 

W 

P 

O 

1 CL 

rd O 

id 

i- 



r— 

> »— 

-P c 

o 

O 

CJ c 

CJ 

Ql t -3 

-Q 

3 CL 

<0 


Id 

LD 

f— i 

o 

CJ 

• 1 

• P 

E 

1 

r- o 

E 

CD 

E 

-o 

O CD 

c 

c 

x: c 

jc P 

O TO 

CD 


(O 

C 

to 

■O CD 

> s- 

•r— 

♦f— 

CJ o 

CJ CD 

U CD 

t- 

Id c 


o 


CD X 

•r- 

1 

1 

■r- 

r— 

to P 

id 

4 - -r— 

to 

c 

to 

■P CD 

VD ^ 

CD 

CD 

"D -P 

■o to 

•r- CD 

CL CD 


3 

1 

3 

tO "D 

to 

U 

p 

C CJ 

C 1 

E -D 

E <J 

L -P 

O 

aj 

O 

r— i— 

CD *r- 

3 

3 

id CD 

to cn 


o td 

O CD 

•r— 

CO 

•r— 

3 O 

E 

f— CD 

r*~ CD 

E c 

E c 

> O 

CJ r— 

to to 

L 

3 

s- 

E to 

• 

*r- C 

•r- C 

E c 

E O 

o to 

to Q- 

C 4 — 


<0 

fO 

•r- C 

-C CD 

to o 

to o 

o o 

O P 

CL C 

•»- CD 

CD 4 - 

> 

<J 

> 

t^> 3 

cj 2 : 

Ll. C 

Lu C 

CJ CJ 

CJ 5 

Ll- 3 

z: v- 

OO O 

00 


CD 


, 

( 

i— H 

i 

I 

| 

i 

1 

*3- 




t 

1 


i 

1 

1 

i 

1 

C\J 


l-H 

1 

t— i 

f— H 

1 

f-H 

»— 1 

i-H 



00 


CVJ 

1 



i 







c 

§ 

-C 

tO 

</) 

-D 

O 

u 

CD 

CL 

CD 


CD 


(\j 


CD O 

C\J 


C- 

O 


C 

o 

+-> 

3 

-O 

•r— 

S- 

-P 

CO 

♦r* 

"D 

CD 


LT> 


CD 


00 


c\j 


CD 

cvj 


* 

Id 

o 


-O fd 

O ’ — * 


CD 


-O 

00 



CJ 


CD 

5- 

to 

to 

a: 

cj 


to 

o 


cj 

-It 





Comp. Time Period (Months) 

F-000 1980 198_1 _ 1982 1983 Criticality Description - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 


C-53 







i 

■Q 








i- 

4-> 

01 


-o 

>> 


to 


c 

o 

CD 

XJ 


01 

V 




•r— 

4-> 


O 

LU 


c0 


(11 



CO 

(J 

S- 

CL 

s- 

4-> 


-XL 

CD 

"O 

•f— 

O 

U 

O 

o 

C 


U 

c 

C 

CO 

CO 

o 


.c 

01 

Cl 

o 

oi 

ro 

OJ 


u 

01 

to 

E 

E 

CO 

N 

-O 

J- 

“a 

1 



O 

cd 

i 




01 

£ 


u 

E 


CD 

■o 

“O 

*0 

T3 

o 

4- 

o 


Cl 

i- 

oi 

<0 

01 

C 



4-> 


O 

03 

cr> 

01 

TJ 

o 


+-> 

•f— 

o 

1 

O. 

co 

r— 

C 

-O 

01 

O 

u 

4-> 

CO 

E 

E 


o 

CD 

DO 

-C 

10 


~ 

O 

cd 

01 

-Q 

“O 

<o 


o. 

o 

O 

U 

TD 

CO 

01 

1 

-L-> 


CO 

c0 

►-H 

co 

1 

O 

T3 

ai 

r- a. 


(J 

Q. 

Li_ 

•r— 


O 

1 

u 

O CO 

c 

1 

<0 


E 

Ll 


ai 

3 

> (J 

o 

-o 

(j 

c 


CX. 

l 


i— 



01 

I 

o 



Q 

3 

•r— 

TD S 

JU 

CL 

co 

•r- a» 

u ai 

O 

*— < 

p— 

<o 

r— 01 

co 

CX 01 


CO c 

ca c 


Ll 

•r— 

4- 

o c 


o c 

Q 

S- o 

-Q o 

5 CD 


»0 

c 

-C 1 

r— 

s- o 

»— l 01 

01 c 

“O c 

C 

10 

4- ai 

CNJ O 

u 

•»— 

x> c 

Ll C 

^ t 

01 1 

•— o 

3 

c 

h- -r- 

"D O 

o 

1 

o 

c oi 

OJ • 

CL C 

O 

01 o 

O J-> 

•i- +j 

CO 

01 "D 

01 c 

O S- 

E 

Q. 1 

01 

DO C 

3 U 

o •»- 

o 

OVr- 

L- i 

O 13 

<0 

<D 

c 

*0 1 

0J 

C (J 


co U 

rO j-> 

r “ 

<c -*-> 

CD “O 

o 

4-> X3 

C CL 

01 cd 

> 

4-> Or 

p i_ 

o •<— 

> c 

=> O 

i- 

•— <o 

• to 

r— a. 

o 


E O 

v rd 

o o 

<_) -r- 

S- o 

o ai 

-C c 

O CO 

CL 

O O 

O -C 

<C Ll. 

1 

1 

21 (J 

1 

1 

O -O 

t 

1 

LU *— ■ 

1 

1 

> r— 

1 

1 

(-> *r- 

1 

1 

m u 

1 

1 

o 

1 

> -*-» 
1 

CJ co 

C\J 



tH 

fH 

1 

1 

1 

l“H 

I 

H 

f-H 


C\j 


o> 

co 


JD 

in 


-Q 

VO 


cO 

r^ 


-D 


u 


co 

co 


-o co 

O f-H 

CNJ C\J 


u 

f-H 

CNJ 


CO 

CNJ 


Pressure sensor failure-high 
resistance conductor path-none 


Comp. Time Period (Months) 

F-800 1980 1981 1982 1983 Criticality DescriDtion - Cause 

ailure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 


054 


a 
a i 
c 
cl 

Q J 
U 
(0 
4— 

c 

3 


(j Qj 
OJ LO 
4- fC 
0) <j 
X3 
I XJ 
5 ( 17 
O 


07 

CD 

c c 

•r- 03 
-C 
■*-> (J 


3 

U 

i- 


•«“ o. 
U to 




01 

+■> 

01 

B 

O 

u 

QJ 


U 

o 

o 

Cl 
\ X> 
L- 01 
QJ 4-> 

+j s- 
qj a) 
E •- 
O fO 

u 


I 

c 

o 

c 


I 

c 

5 

0 
c 

c 

3 

1 

XJ 

01 


00 

*— <o 

( 

r— 

a; 

01 ■— 

c 

X> 


»“ 

+-> Q) 

QJ 

c 

»— 01 

3 


c u 

>> o 

u •— 

U 

o 

01 c 

1 

to 

O -r- 

1 — to 

O 3 

O 

c 

u c 

to T3 

XJ 

O fO 

O- 

.c xj 

ro 

1 

u o 

- OJ 

<0 

Cl Cl 

Q- 

to O 


01 

to to 

O 4-> 

01 01 

1 <D 

3 * 

i E 

X) 

u 

u 

L- 

U CD 

on L- 

to aj 

CNJ 

0) 

c 

O 01 

Ll_ 01 

-C c 

<U t 

c 

• • 

c 

ro 

4-> o. 


■4-> rd 

c cn 

u o 

-C TD 


c 

1 

+-> to 

-C 

•r- C 

ai c 

CJ c 

-Q 

o 

OJ • 

c 

01 u 

5 

5 1 

o 

E 

to 

cr>4-> 

01 *— 


4-> 

O L- 

v- <j 

O 

qj 

to •*-* 

+j 01 

U 01 

X 3 

CL o 

o 

o 

j- 

+-> 

-M C 

10 i- 

ai o 

+-> 

1 — 

1 


»— u 

**- c 

4-» <0 

4- L- 

• to 

to rd 

to 

+-> 

O 01 

E O 

Q- % 

4- 

> -1- 

- c 

— 

c 

> XJ 

V- to 

01 +-> 

<0 "D 

to 

o cn 

Q 

3 


Q> V- 

U 4- 

-C C 

CNJ QJ 

*—* •*— 


O 

o o 

-*-> QJ 

01 O 

CJ fC 

' — < S- 

Ll. to 

Ll. 

E 

Z to 

►—4 Q. 

cc to 

— 

1 

1 

r-H 

CNJ 


t-H 

^r 

- 

1 


1 

00 


, 


1 


CNj 


GO i-H 


C\J 


-Q 

00 


CNJ 


C\J 


<0 

o 


-Q 

O 







CO 



U 




E 


<L 

CD 

"D 



4 

CJ 

U 

C 

C 

QJ 

Cl 

o 

CO 

*— CO 

c 

3 

00 

•r— 

c 

r— 

co «— 

o 

O “O 

3 

•M 


CL. 

E O 

u 

4 <U 

cO 

1 

4- 

QJ 

u <u 


Ov»- 

° C 

Cn 

0- 

4 

o u 

-O 

4- 

o 

C 

o 


c 

CO 

i— *r— 

1 »r- 

•p— 

1 

4 

4 

-Q 

cO +-> 


r- 4 

c 

o 

4- o 

1 

C O 

^ 3 

•r- *r— 

o 


4- 

4 

4 c 

O jf 

CO CO 

•r— 

4 

o u 

4- 

O) 

t: o 

4- CL 

00 

•r- 

1 -r~ 

O 

-M * 

if S 

<D 

O 

co 

DO CO 


c oo 

.9- E 

«*-> 4 

4 

CL 

C CL 

CD 

•r- U_ 


O 

4J O 

•r“ C 

C 

O 

, 

00 

o 

(J 

> T5 

4> O 

CO *r- 

•f— 


3 

l 


o 

(D 

•r~ »— 

4- 5 

4 

U 

cn 

4-> 

u 

4 

-*-> 4> 

E 

4 

3 


C 

u 

•r- 

CL 

3 CO 

4 CL 

^ “D 

“O 

■M 


(U 

4-> 


Cl r— 

QJ cO 

4 1 


CO 


cx 

CO 

• 

■M O 

-*-> 4 

CO CL 

O 

4 

£ 

00 

4 

DO 

3 V) 

C 4-> 

CX-r- 


4 

o 

3 

4 

4- 

O *r- 

• CO 

t/> +-> 

Ll_ 

LU 


O0 

UJ 

E 

i — 1 


CM 

CM 

CM 

CD 


*3* 



CD 

• O 4 
0.0 3 
E O r- 
O I *r“ 
UO (O 


ro oo 


VD C\J 


Output failure, electrode short- 
off normal combustion-none 


ELECTRICAL HARNESSES 


C-56 


(0 

3 

3 •<- 

00 

CD CD 

C 1 

CO 

a) 


c 

<0 

^ CO 

o 


3 4-> 

o 

“O 

r- U 

O 

M- C 

c c 

O VO 

CO 


c 


O SI 

4-> 

CO 

CO 


CD 

SZ 

O 

o> o 

o o 

o »— < 

•f— 


O 

c 

U O 

CJ 

c 

1 4-> 

U 

O 

CD i A 


-o c 

u •<- 

«— 

"D 


CJ 

o 

-O CD 

CD 

•r- 

C C- 

•r- 

O 

u 


1 

-M 

Cl. 


c 


CO 

4-> 

c 


QJ QJ 

-Q 

U 

•*- 4-> 

s- 

U -O 

CD OJ 

U CJ 

C- 

CD 

-M 

c. 


c 

5 

r— 


Q- 

3 03 

o 

O CD 

> c 

O L U 

o 


(J 

QJ 

r- cn 

o 

QJ 

o <a 

CO 


a> 

4-> 

+-> (J 

•r— *i— 

+-> 1 

-*-> 

CO 

a> 

CL 

QJ C 

(J 

C 

C- 1 

00 

S- 

"o -c 

u 

CJ rO 

«*-> E 

<j qj 

u 

CD 

w 

1 

x -I- 



x a; 

CD 

•r— 

C l 

QJ 

OJ r- 

<J no 

a> o 

aj 

~o 

s- 

u 

CO C 

QJ 

u 

CD 

C 

03 

3 • 

c 

c Cl 

a> -o 

c cr 

c 


o 

o 

J* rd 

CO 

o 

QJ 03 

u 

Cl 

O E 

c 

C CO 

M— C 

c c. 

c 

5 

o 

C- 

(j OJ 

o 

u 

U E 

to 

a; 

U 03 

o 

o *r~ 

<n o 

o o 

o 

CD 

c 

s- 

<0 »— 

o 

D. 

•r- 03 

:r 

s- 

CD 

CJ 

<-> E 

o u 

CJ 

CJ 

C 

HH 

QJ 

CO u 

— 1 

CD 

3 T3 




r“H 


CVJ 

CVi 



r-t 


CVJ 

CVJ 




<a u 

cn m 




ELECTRICAL HARNESSES (Continued) 


C-57 


QJ 

(A 

3 

tO 

C-> 


§1 

~ QJ 

V- 

O 

0 O 

QJ 


>Jm 


S 


U 

O 1 


|C\J 


oo 

oo 

CD 


I 

|r^ 




I^D 

I 


|OsJ 


£ 


I 

|r^ 


XJ 

O 

£ 

QJ 

Q_ 

QJ 

E 


i 


ICN1 


I 

1^ 


i 


|CVI 


o 

oo 

cd 


i 

|r- 


|vO 

i 


0) 


“O X 


L-J 


C 0 



QJ 


QJ 


I 

> 


X 

• 

OJ 

QJ 

QJ X) 

to 

00 

CD 

QJ 

(J QJ 

3 

u 

to 

r— 

CO 4—> 

C 7 

QJ 

E 

00 

X to 

QJ 

Cl 

to 


L- <— 

XJ 

00 

XJ 

W 

3 O 

tO 



o 

m oo 

c 

QJ 

CD 

X 

1 *r- 

*p— 

3 

c 

to 

XJ 

1 

C7 

■r- 

r— 

QJ e 

CD 

U 

r “ 

3 

XJ QJ 

c 

O 

XJ 

00 

c c 

•1— * 

X 

c 

C 

o o 

00 


to 

•r— 

XI c 

00 

QJ 

X XJ 


QJ l 

•r— 

00 

\ QJ 

X 

XJ c 

E 

to 


•r- S- 
3 OJ 
U r~ 
L- tO 

•r“ 

O • 

i/) 

c x: 

OJ o 

CL OJ 

o X 


f0 

VO 


U Z. 
L- LjJ 
•r- X 

u o 

I 

x in 
l- x? 

O <0 
x a; 

C/O r— 


X 

VO 


-r- 

U X 
O f0 
r— C 

QJ E 
3 *0 
c r+j 
L- c 
o o 

H- U 


tO 

00 


(J 

o 


QJ 

U 

o 

c 


OO 


u 

00 


QJ 

L> 

to 

X 

S~ 

3 

in 

XJ 

to 

JO 

( 


QJ 

O') 

c 

to 


0 

c 

1 

i- 

o 

X 

o 

0J 

c 

c 

o 

o 


VO 


XJ 

00 


CO 

oo 


l 

o 

X 

o 

0J 

c 

c 

o 

V 


xj x 



QJ 

QJ 

u 

<Sj 

<2> 

C 

XJ 




o 

c 

• 

X? 

XJ 

c 

o 

o 

QJ 

QJ 

1 

X 

QJ 

CD QJ 

CD QJ 

QJ 

Q. 

to C 

tO 

CD 

XJ 

in 

U O 

u 

tO 


i 

XJ C 

XJ 

E 


c 

i- 1 

s- 

tO 

u 

o 

*«- XJ 

•r 

XJ 

o 

•r- 

X QJ 

X 



CD 


l 


to 

in *r— 

m 

c 

QJ QJ 

QJ 

i- 

oo E 

in 

•r— 

3 3 

3 

to 

QJ 

QJ 

r— 

cr cr 

cr 

X 

C QJ 

C 

XJ 

L- s- 

s- 

QJ 

l- X 

5- 

c 

o o 

o 

u 

to QJ 

tO 

to 

H- X 

h- 

X 

31 XJ 

31 

X 

CM 

X 






+ 

X 

CD 


CD 

c 

r- XJ 

XJ 0J 
C X 
tO U 
X QJ 

>)« 


3 QJ 

c c 

c 

X O 
C 00 
O V- 
<J QJ 
CL 

X I 
O QJ 
CD 

in to 
tn E 
O to 
-J XJ 


CM 


oo 

oo 

<D 


oo 

I 


OJ QJ 

J* r— 

O X) 

o 

X J- 


oo 

00 

QJ 

S- 

X 

00 

I 

XJ 

QJ 

U C 
to CD 

U -r- 

O oo 


OO 


* 

X 


00 

QJ 


oo 

oo a; 

OJ r— 
C jQ 
•f— tO 

XJ <J 
to *r- 

0J r- 
U- Cl 



X 


QJ 

X 

to 

CD 


CDXJ 

X 


c 

o 

c 

QJ 

CD QJ 

•t— 

c 

•r— 

S- 

•t— 

c 

s- 

1 

l- 

1 

r— 

o 


c 


c 

X 

c 

V- 

o 

U 

o 


1 

QJ 

■r- 

QJ 


<s> 

c 

c 

in 

C 

in 


*r— 

o 

•r— 

O 

in 

o 

to 

i- 

to 

u 

— 

c 

X 

s- 

X 

J- 

Q 


QJ 

o 

QJ 

o 

►—4 

c 

X 

(J 

X 

o 

U- 

3 


CM 


CM 


tO 

CM 


♦Criticality N UCRs are included in the distribution for the time periods shown. 
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‘Criticality N UCRs are included in the distribution for the time periods shown. 
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Comp. Time Period (Months) 

K-100 1980 1981 198? 1983 Criticality Description - Cause 

Failure 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1 2 3 Resolution 
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♦Criticality N UCRs are included in the distribution for the time periods shown. 


Comp. Time Period (Months) 
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Listing of High Occurrence/Criticality Failure 
Types and Probable Causes by Component 
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SSME ACCIDENT/INCIDENT REPORT SUMMARIES 


(I) TEST MPT SF6-003 STEERHORN FAILURE (February 25, 1980) 


During a main propulsion test on the NSTL test stand, the HPOTP 
secondary seal cavity pressure exceeded the 100 psi maximum redline 
value. During the shutdown, Steerhorn No. 3 ruptured. According to 
strain gage data and analysis, the loads were not sufficient to fail 
a steerhorn for about 48 tests and this test was only the eighth for 
the failed steerhorn. Investigation showed inadequate welds and 
revealed Inconel 62 weld wire was used instead of Inconel 718. The 
resulting joint strength was approximately half of the design 
strength. The recommendations to prevent recurrence follow: 


(1) Eliminate all 0.049 inch thick steerhorns 

(2) Continue steerhorn redesign 

(3) Reinforce all tee welds 

(4) Investigate nozzle aerodynamic shock loading 

(5) Continue strain gage and accelerometer monitoring 

(6) Conduct survey to determine critical welds and weld wire 
uti 1 ization 

(7) Determine the need for additional controls on filler wire 
certification 


( : I) ENGINE 0010 TEST 901-284 HIGH PRESSURE OXIDIZER TURBOPUMP FIRE 
(January 15, 1981) 

During a test at NSTL test stand A-l, the Redline Acceleration Safety 
Cutoff System (RASC0S) initiated the shutdown. The low-pressure oxi- 
dizer discharge duct ruptured during shutdown, causing extensive 
engine damage. Failure of the duct was caused by a fire originating 
in the main oxidizer pump. 

Two unrelated failures caused abnormal operation of the engine. The 
first failure was the loss of the channel B pressure measurement 
(chamber) due to controller channel B shutdown induced by a facility 
power surge. The other failure was the dislodging of a purge Lee Jet 
device introducing a large pressure bias. Deep throttling to 60 per- 
cent RPl and an engine mxiture ratio of 3.5 (6.0-normal) resulted. 

The conditions caused a thrust balance towards the pump and a gradual 
ice buildup in the turbine, which finally caused the thrust balance 
capability to be exceeded. Rubbing caused metal ignition in an oxy- 
gen environment and fire propagated throughout the pump causing the 
low-pressure oxidizer discharge duct to rupture. 

Had similar conditions been encountered during launch, an engine 
shutdown would have been initiated prior to launch commit for loss of 
redundancy. The corrective actions recommended were: 

(1) Implement shutdown on test stands for major component 
failures before SRB 
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(2) Incorporate additional main chamber pressure reasonable- 
ness checks in the software during start transients to 
ensure redundancy 

(3) Delete the low main chamber pressure redline and add lower 
HPOTP turbine discharge temperature redline to check for 
possible icing 

(4) Modify Lee Jet orifice retention method 

(5) Perform a pull test on all Lee Jet body installations 

(6) Study to assess engine control and redline logic for 
vulnerabi 1 ity 

(?) Study to assess all other Lee Jet installations in SSME 

(6) Study of HPOTP turbine end clearances 

(9) Inspect all facility Invertron units 
(10) Replace all facility Invertron unit power transistors 


(III) ENGINE 0009, TEST 901-307: ENGINE 0204, TEST 902-244 FUEL PREBURNER 

FAILURES (December 22, 1981) 

Failures were in the LOX post injection elements caused by high-cycle 
fatigue. The mechanism for high alternating stress is the combined 
mainstage mechanical vibration and the element hydrogen flow induced 
vibration. Also, in engine 0204, the injector face plate was eroded 
and slag buildup was found on forty posts. 

The design fix was to increase the moment of inertia and damping in 
the cantilevered LOX posts. This would reduce peak alternating 
stresses below the endurance limit. The fix incorporated three pin 
supports between the LOX posts and the fuel sleeve to restrict the 

motion. 


(IV) POWERED UNIT 2015 PROOF TEST FAILURE: FUEL PREBURNER-FUEL SUPPLY 

DUCT 

The fuel preburner fuel supply duct ruptured during the powerhead 
proof pressure test. A hardness test performed on the duct found it 
to be low of the designed hardness. The supplier failed to heat 
treat the elbow because of a misunderstanding of Rocketdyne drawing 
requirements. Also, Rocketdyne receiving inspection failed to detect 
the omission of heat treatment. Recurrence control consisted of: 

(1) The planning at the supplier incorporates heat treatment 

(2) Future supplier planning for small suppliers will be 
reviewed by Rocketdyne personnel 

(3) Receiving inspection plans have been revised to incorpor- 
ate physical verification of heat treatment for all appro- 
priate parts 

(4) Previously accepted parts requiring heat treatment that 
were accepted by the same individual at prescreening have 
been checked for compliance 

(5) Personnel responsible for prescreening have been advised 
of the requirements at a workshop 
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(V) ENGINE 2013 NSTL TEST 901-364 HIGH-PRESSURE FUEL TURBOPUMP KAISER HAT 
FAILURE (July 14, 1982) 


A scheduled 500 second full power level mission simulation test was 
terminated at 392.16 seconds due to the preburner pump radial accel- 
erometer redline. Major portions of the engine were severed from the 
test stand attachments. Using various data, analyses, motion pic- 
tures, test fire simulations, and model simulations, it was concluded 
that the recently redesigned HPFTP Kaiser hat provided a hot-gas leak 
path of hot gas into the bearing coolant. Turbine bearing failure 
was followed by rotor displacement, turbine blade failure, rotor 
seizure, rupture of the HPFTP inlet, and an oxidizer rich shutdown. 
This was the first test of the latest redesign of the Kaiser hat 
assembly. Recommendations were: 


(1) Return to the old Kaiser hat assembly configuration 

(2) Periodic inspection of the Coolie hat nut for retention 


Additional actions to prevent other recognized potential failures: 


(1) Reduce turbine operating temperature 

(2) Improve HPFTP Liftoff seal dimensional control 

(3) Improve Kaiser hat inlet design with a seal 

(4) Improve fuel preburner propellant distribution by cooling 
ASI core 


(VI) ENGINE 0107, SSFL TEST 750-168 OXIDIZER PREBURNER OXIDIZER VALVE BALL 
SEAL FAILURE (January 27, 1983) 

A scheduled 300 second test was terminated normally, but subsequent 
data analyses showed the HP0TP discharge temperature rising signifi- 
cantly beginning two seconds after shutdown command until the temper- 
ature sensors failed. No external damage ws apparent, but signifi- 
cant high-mixture erosion was found in the HP0TP turbine area and 
not-gas manifold. A leaking oxidizer preburner valve was found to be 
the source of the high-mixture ratio. The ball seal had circumferen- 
tial erosion and a radial seal crack was found. The cause was a 
fuel-rich ASI hot-gas backflow into the valve seal cavity during 
shutdown. 

Corrective action was recommended to preclude hot-gas backflow during 
shutdown. Until an adequate solution is established, the 0P0V seal 
test life should be limited to ensure seal damage does not approach 
proportions experienced in this incident. 


(VII) HEAT EXCHANGER COIL ARC BURN (July 25, 1983) 

During the tungsten inert gas (TIG) weld operation that joins a 
transfer tube to the heat exchanger liner the welder made inadvertent 
contact to the heat exchanger coil producing an arc burn. This inci- 
dent was the result of the welder being unable to see the weld joint 
for about 1.5 inches of arc length. The welder removed the protec- 
tive closure around the heat exchanger coil to weld past the point of 
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visual obstruction. At this point the welder mis-positioned his 
torch too close to the coil. Corrective actions were implemented: 

(1) Manufacturing operations record (MOR) books were revised 
to add caution notes at potentially hazardous operations 
to prevent operators from removing protective covers. 
Caution notes will appear as follows: 

(a) At the beginning of each operation - "Do not remove 
coil protection without manager's concurrence" 

(b) At the end of each operation - "Replace covers if 
removed" . 

(2) Department 518 has met with welders to reinforce the need 
for discipline in adhering to procedures. 

(3) Improved heat exchanger coil shields which cannot be 
removed unless a sealed safety wire is cut, were designed 
and installed. 

(4) Long term corrective action involves design of covers from 
a more durable heat and chemical resistant materials. 

This will eliminate the need to remove covers for clean 
and oven dry operations. 

(5) Rocketdyne is developing special welding goggles with a 
face shield that protects the welder from heat and radia- 
tion. The new goggles will improve visibility over the 
entire weld area. 


(VIII) SSFl TEST 750-175, ENGINE 2208 HIGH PRESSURE OXIDIZER DUCT FAILURE 
(December 15, 1983) 

A test at tne SSFL Laboratory was terminated prematurely by the pre- 
burner pump redline accelerometers sixteen seconds after the engine 
had been throttled from FPL (109 percent) to 111 percent of rated 
power level and the high-pressure oxidizer discharge duct failed. 

The investigation concluded the failure resulted from a high-cycle 
fatigue crack in the duct wall at the edge of one of the ultrasonic 
flow transducer blocks mounted on the duct wall. The failure was 
cuased by the combination of thinning the duct wall to install the 
transducer blocks, the added block masses, and the increased local 
stresses caused by brazing the blocks to the wall of the duct. 

It was recommended that to rely on braze fillets to reduce stress 
concentration not be done in the future. Any such applications would 
necessitate extensive analysis and testing to ensure integrity of the 
parts involved. 



APPENDIX G 


SSME FAULT TREE DIAGRAMS BY COMPONENT 
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FIGURE G-l. HOT-GAS MANIFOLD (AlOO) FAULT TREE 
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FIGURE G-2. HEAT EXCHANGER (A150) FAULT TREE 
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FIGURE G-3. MAIN INJECTOR (A200) FAULT TREE 
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Nozzle Damage 


Engine 

Fire 











FIGURE G-4. MAIN COMBUSTION CHAMBER (A330) FAULT TREE 








FIGURE G-5. NOZZLE ASSEMBLY (A340) FAULT TREE 
































FIGURE G-7. TURBOPUMP (B200, B400, B600, & B800) FAULT TREE 
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FIGURE G-9. VALUE (D110 - D600) FAULT TREE 
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APPENDIX I 

FAILURE MODE RANKING 

Description of Procedure and Summary of Results 
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SSME FAILURE MODE RANKING PROCEDURE 


I. Three Line UCR Review 

A. Considered all UCR 1 s of criticality 1, 2, and 3 

B. Deleted UCR's that did not affect engine performance 

C. Deletec UCR's that were minor and did not recur after corrective 
action was taken by Rocketdyne 

II. Full Page UCR Review 

A. Deleted minor problems that did not affect engine performance and 
safety 

B. Deleted some minor problems that present quality assurance steps 
would catch 

III. Ranking of Failures 
A. Risk Factor 

Determine, from the criticality factor, the full page UCR descrip- 
tion, and the FMEA report 



RISK FACTOR VALUES 

1.000 

Loss of vehicle 

0.500 

Probable loss of vehicle 

0.333 

Loss of engine 

0.250 

Probable loss of engine 

0.200 

Extensive engine damage 

0.167 

Local engine damage 

0.143 

Minor local engine damage 

0.125 

Very minor damage 

0.111 

Piece part damage 

0.100 

Part still OK 


B. Time Factor 

The estimated least amount of time from occurrence of failure mode 
to engine loss or limit shutdown with reference to the FMEA report 

TIME FACTOR VALUES 


1.000 

Instantaneous 

0.500 

Milliseconds 

0.333 

One to ten seconds 

0.250 

Ten to sixty seconds 

0.167 

Hour to never 


C. Frequency of Failure Factor 

The square root of the number of UCR's written for each failure 
mode divided by one-hundred, which ranged from 0.1 to 1.02 

D. Cost Factor 

The square root of the estimated cost per annum in millions of dol- 
lars subtracting costs that detection would not eliminate. 
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1. Ground rules 
a. 


b. 


c. 

d. 


for cost estimates 
Estimate the probability per flight and test stand firing 
of possible failure occurrences. Probabilities and costs 
will be broken down into the different levels of risk 
factor. Probabilities are based on the number of UCR's 
and their information content along with the FMEA report 
and the Probabilities in the Space Shuttle Range Safety 
Hazards Analysis Report . 

Divide the probability by three 
flight, 
ings for 
Multiply 


if only applicable to 
This assumes there are on average two test fir- 
every engine flight firing, 
the probability of occurrence times the cost. 


Add each subtotal and multiply by 150. The assumption is 
that there are 150 firings total per year including test 
and flight firings. 


Cost structure in 
Vehicle loss 
Mission loss 
Engine loss 
Major engine 
Local engine 


dollars 


damage 

damage 


2 

200 

33 

20 


Billion 

Million 

Million 

Million 


Varies 


IV. Ranking Algorithm 


A. 10,000 x RF x TF x FFF x CF = Total 

B. Ranking divisions 


Total Rank 

>400 1 

200-400 2 

100-200 3 

50-100 4 

30-50 5 

20-30 6 

12-20 7 

7.5- 12 8 

3. 5- 7. 5 9 

<3.5 10 



Ranking of Failure Modes 
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Final Ranking of Failure Modes 


Rank 

Comp. 

Failure 

Possible Cost Savings 
($ Million) per Annum 

1 

B400 

Vibration - bearing loading* 



A150 

Cracks, leak on coil 

0.840 

2 

A100 

Cracks, rupture in duct 

0.410 


A100 

Leak in MCC ignition jt. 

0.330 


A200 

ASI supply line cracks 

0.480 


B400 

Bearing ball and race wear 

0.550 

3 

A330 

Turbine drive manifold leak 

0.180 


B200 

G-5 joint erection 

0.180 

4 

J200, J300 

Output failure* 



A340 

Steerhorn rupture 

0.200 


A600 

Faceplate erosion 

0.240 


B200 

Diffuser failure 

0.120 


B200 

Inlet failure 

0.120 


B200 

Missing shield nuts 

0.150 


D140 

Ball seal leak and melting 

0.214 


D300 

Cracked poppet 

0.168 


J300 

Sensor debonding* 

— 

5 

A200 

Heat sheild retained cracks 

0.165 


A600 

Baffle & LOX post erosion 

0.160 


A600 

Baffle, molyshields & liner cracks 

0.120 


A600 

Missing or extra support pins 

0.126 


B200 

Turbine blade & platform erosion 

0.210 


B200 

Seal cracks 

0.106 


B200 

Coolie cup nut cracks 

0.080 


B200 

Broken turbine blades 

0.105 


B400 

Turbine blade cracks 

0.060 


B400 

Bearing cage delamination 

0.087 


C100 

Check valve leaks 

0.084 


GOOO 

Igniter tips erosion 

0.069 


HOO0-O02 

Birdcaged harness 

0.069 


HOOO-O02 

Loose, defective connector 

0.102 


H000-002 

Debonded torque lock 

0.072 


LOOO 

Seal damage 

0.110 


B200 

Vibration levels (cavitation)* 

— 

6 

A100 

Loose stud fasterners 

0.065 


A100 

Leaks G-5 seals 

0.133 


A100 

Stud keys missing, broken 

0.051 


A150 

Tube clearance problems 

0.063 


A200 

Loose T-bolts 

0.123 
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Final Ranking of Failure Modes (Continued) 


Possible Cost Savings 

Rank Comp. Failure ($ Million) per Annum 


A200 

Metal contamination 

0.066 

A340 

Tube leaks 

0.009 

A600 

Nonconcentric lox posts 

0.102 

B200 

Struts & post cracks 

0.036 

B200 

1st stage vane erosion 

0.115 

B200 

Bellows shield cracks 

0.104 

B200 

Liftoff seal leak 

0.087 

B200 

Broken seals 

0.078 

B200 

T/A manifold damage 

0.060 

B200 

Missing locking pins 

0.075 

B200 

Contamination 

0.025 

B400 

Housing cracks 

0.042 

B400 

Contamination 

0.024 

B400 

Shaft torque — rubbing dampers 



C270 

HPOTP purge PAV leak 

0.123 

H000-002 

Broken wire, backshell 

0.051 

M000 

Wear, fretting on gimbal 

0.102 

M000 

Crack in bushing 

0.109 

A200 

LOX post cracks 

0.077 

A200 

Face & Interprop, plate carcks 

0.067 

A330 

Burst diaphragm leaks 

0.033 

B200 

Excess shaft travel* 

_ _ 

B800 

Bearing ball wear 

0.038 

D120 

Ball seal leak 

0.080 

E001-150 

Early purge 0-ring shaft 

0.024 

GOOO 

Bad output 

0.036 

J300 

Broken sensor tip 



J300 

Low insulation resistance 



K100 

Leak 

0.054 

K100 

Broken burst diaphragm 

0.030 

N600 

Deformed orifice 

0.048 

A200 

Reinforcement ring cracks 

0.063 

B200 

Vane failure 

0.045 

A200 

LOX post erosion 

0.057 

A340 

Tube cracks 

0.003 

A340 

Broken welds 

0.015 

K100 

Weld cracks 

0.026 

K200 

Cracks on ducts 

0.023 

D130 

Low flow rate - bolt assy. 

0.039 

A200 

Face plate erosion 

0.056 

A330 

Hot-gas wall centerline cracks 

0.039 

A330 

Liner delamination 

0.051 
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Final Ranking of Failure Modes (Continued) 


Rank 

Comp. 

Failure 

Possible Cost Savings 
($ Million) per Annum 

8 

A330 

Coolant inlet welds mismatch 

0.036 


A340 

Outer jacket cracks 

0.018 


A700 

LOX post & liner erosion 

0.051 


A700 

LOX post cracks 

0.102 


B200 

Sheetmetal cracks 

0.016 


B200 

T/A manifold cracks 

0.030 


B200 

Missing discharge nuts and lugs 

0.036 


B400 

Bearing support wear 

0.055 


B400 

Spring lands wear 

0.055 


B400 

Nozzle vane cracks 

0.048 


B400 

Turbine blade contamination 

0.011 


B400 

Strut damage 

0.024 


B600 

Insulation rupture, cracks 

0.016 


B600 

Excessive torque 

0.024 


B800 

Contamination 

0.011 


D120 

Ball seal leak 

0.030 


D300 

Poppet remained open 

0.013 


E001-150 

Wireway leak 

0.009 


F800 

FID? 

0.006 


G000 

Low insulation resistance 

0.015 


H000-002 

Open or short circuit 

0.036 


J200 

Bent pin* 

— 


J600 

Output failure 

0.040 


J800 

Output failure 

0.030 


K200 

Contamination 

0.017 


K500 

Kink, twist, or compressed 

0.017 


LOOO 

Protrusion on seals 

0.041 

9 

A100 

Contamination 

0.013 


A330 

Contamination 

0.014 


A340 

Hat band leaks 

0.006 


A340 

Misaligned fuel joints 

0.036 


B200 

Turbine blade shank cracks 

0.033 


B200 

Inlet duct cracks 

0.028 


B200 

Bearing ball dry-lube cracks 

0.019 


B200 

Turbine end ring cracks 

0.021 


B200 

Burnt vane 

0.024 


B200 

Nickel insulation damage 

0.008 


B200 

Bearing ball wear 

0.026 


B200 

Gouges in vane 

0.009 


B400 

Strut cracks 

0.008 


B400 

Sheetmetal cracks 

0.009 


B400 

Liner erosion 

0.024 


B400 

Turbine disk rubbing 

0.036 


B400 

Shaft travel* - bearing loading 

— 


B600 

Contamination 

0.011 
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Final Ranking of Failure Modes (Continued) 


Rank 

Comp. 

Failure 

Possible Cost Savings 
($ Million) per Annum 

9 

B800 

Shaft torque* - bearing cage 
friction 

0.006 


B800 

Flange surface undercut 

0.010 


D120 

Excessive pressure* 

— 


D130 

Ball seal leak 

0.026 


0130 

Internal leak 

0.014 


D140 

Excessive pressure* 




D150 

Studs overtorqued 

0.018 


D300 

LVDT signal erratic 

0.006 


D500 

Valve leak 

0.012 


E001-150 

Seal leak 

0.009 


E001-150 

FID? 

0.017 


E001-150 

Electrical problems 

0.009 


J200 

Output drift* 




J200 

Low output resistance* 




J800 

Missing dielectric insert 

_ — 


K100 

Joint overmold debonded 

0.013 


K100 

Tolerances 

0.009 


L200 

Loose stretch bolts* 




N600 

Tolerances 

0.009 

10 

A330 

Hot-gas wall erosion 

0.303 


A330 

Wear on strut clevis 

0.005 


A340 

Defective temp., & radiometer 
sensors 

— 


A600 

Contamination 

0.504 


B200 

Bearing support cracks 

0.015 


B400 

Strut erosion 

0.012 


B800 

Stator ding 

0.006 


0110 

Contamination 

0.004 


D130 

Contamination 

0.004 


D300 

Contamination 

0.009 


D500 

Port 0240.1 leak 

0.003 


D600 

LVDT voltage low 

0.006 


D600 

Contamination 

0.006 


E001-150 

Vent port leak 

0.005 


E001-150 

Servoswitch failure 

0.006 


E001-150 

Vent port pitting 

0.008 


E001-150 

Broken wireway nut 

0.009 


E001-150 

RVDT limit* - engine flashback 

— 


E001-140 

Defective 0-ring 

0.006 


E001-005 

Sequence valve anomaly 

0.006 


E001-150 

Contamination 

0.005 


E001-150 

Hydraulic oil wetting 

0.002 


I 
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Final Ranking of Failure Modes (Continued) 


Rank 

Comp. 

Failure 

Possible Cost Savings 
($ Million) per Annum 

10 

F800 

Chaffed wires 

0.002 


H000-002 

Insulation resistance low 

0.003 


K100 

Joint boot tear 

0.003 


K100 

Nickel insulation cracks 

0.003 


K100 

Seal cracks 

0.005 


K100 

Frost on bellows 

0.004 


K200 

Support link cracks 

0.006 


K200 

Duct wear 

0.004 1 


K200 

Impressions on ring 

0.006 * 


K300 

Misaligned joint 

0.001 


K300 

Contamination 

0.005 I 


K500 

Contamination in joint 

0.004 


K600 

Controller cooling duct cracks 

0.003 


N600 

Low torque 

0.005 
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LISTING OF SSME MEASUREMENT PARAMETERS BY COMPONENT 
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MEASUREMENT PARAMETER TABLES KEY 

F -- Inflight Measurement 
G — Between Flight Measurement 
B — Both Inflight and Between Flight Measurement 
D -- Detection of Failure 
T -- Trending Information 
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COMPONENT A200-- MAIN INJECTOR 
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